Oval Definition:oval:com.redhat.rhsa:def:20070057
Revision Date:2007-03-14Version:636
Title:RHSA-2007:0057: bind security update (Moderate)
Description:ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols.

  • A flaw was found in the way BIND processed certain DNS query responses. On servers that had enabled DNSSEC validation, this could allow a remote attacker to cause a denial of service. (CVE-2007-0494)

  • A use-after-free flaw was found in BIND. On servers that have recursion enabled, this could allow a remote attacker to cause a denial of service. (CVE-2007-0493)

    Users of BIND are advised to upgrade to these updated packages, which contain backported patches to correct these issues.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2007-0493
    CVE-2007-0494
    RHSA-2007:0057
    RHSA-2007:0057-02
    RHSA-2007:0057-02
    Platform(s):Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • bind is earlier than 30:9.3.3-8.el5
  • AND bind is signed with Red Hat redhatrelease2 key
  • bind-chroot is earlier than 30:9.3.3-8.el5
  • AND bind-chroot is signed with Red Hat redhatrelease2 key
  • bind-devel is earlier than 30:9.3.3-8.el5
  • AND bind-devel is signed with Red Hat redhatrelease2 key
  • bind-libbind-devel is earlier than 30:9.3.3-8.el5
  • AND bind-libbind-devel is signed with Red Hat redhatrelease2 key
  • bind-libs is earlier than 30:9.3.3-8.el5
  • AND bind-libs is signed with Red Hat redhatrelease2 key
  • bind-sdb is earlier than 30:9.3.3-8.el5
  • AND bind-sdb is signed with Red Hat redhatrelease2 key
  • bind-utils is earlier than 30:9.3.3-8.el5
  • AND bind-utils is signed with Red Hat redhatrelease2 key
  • caching-nameserver is earlier than 30:9.3.3-8.el5
  • AND caching-nameserver is signed with Red Hat redhatrelease2 key
  • BACK