Oval Definition:oval:org.mitre.oval:def:6665
Revision Date:2014-03-24Version:22
Title:HP-UX Running BIND, Remote Denial of Service (DoS), Unauthorized Disclosure of Information
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-0382
Platform(s):HP-UX 11
Product(s):
Definition Synopsis
  • Criteria meets HP Security Bulletin HPSBUX02546
  • HP-UX B.11.23
  • AND filesets tests
  • BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0
  • OR BindUpgrade.BIND2-UPGRADE version is less than C.9.3.2.7.0
  • OR Criteria meets HP Security Bulletin HPSBUX02546
  • HP-UX B.11.23
  • AND filesets tests
  • InternetSrvcs.INETSVCS-INETD is installed
  • OR InternetSrvcs.INETSVCS-RUN is installed
  • OR InternetSrvcs.INETSVCS2-RUN is installed
  • AND NOT Patch PHNE_40339 is installed
  • OR Criteria meets HP Security Bulletin HPSBUX02546
  • HP-UX B.11.11
  • AND BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0
  • OR Criteria meets HP Security Bulletin HPSBUX02546
  • HP-UX B.11.11
  • AND BINDv920.INETSVCS-BIND version is less than B.11.11.01.015
  • BACK