| Vulnerability Name: | CVE-1999-0833 (CCN-3476) | ||||||||
| Assigned: | 1999-11-08 | ||||||||
| Published: | 1999-11-08 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Buffer overflow in BIND 8.2 via NXT records. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CALDERA Type: UNKNOWN CSSA-1999-034.1 Source: CCN Type: Caldera International, Inc. Security Advisory CSSA-1999-034.1 several vulnerabilities in bind Source: CCN Type: SCO System Security Enhancement (SSE) SSE033 System Security Enhancement (SSE) Source: MITRE Type: CNA CVE-1999-0833 Source: CCN Type: RHSA-1999:054-01 Security problems in bind Source: CCN Type: Hewlett-Packard Company Security Bulletin HPSBUX0005-114 Security vulnerability in the BIND executable Source: CCN Type: CERT Advisory CA-1999-14 Multiple Vulnerabilities in BIND Source: CCN Type: CERT Advisory CA-2000-03 Continuing Compromises of DNS servers Source: CCN Type: CIAC Information Bulletin K-007 Multiple Vulnerabilities in BIND Source: CCN Type: CIAC Information Bulletin K-036 Continuing Compromises of DNS Servers Source: CCN Type: CIAC Information Bulletin K-050 NXT BIND 8.2.x Overflow Vulnerability Source: DEBIAN Type: Debian Security Advisory 16 Nov 1999 Denial of service vulnerabilities in bind Source: CCN Type: Internet Software Consortium (ISC) Web site BIND Vulnerabilities Source: CCN Type: US-CERT VU#16532 BIND T_NXT record processing may cause buffer overflow Source: CCN Type: OSVDB ID: 24 ISC BIND NXT Record Overflow Source: BID Type: UNKNOWN 788 Source: CCN Type: BID-788 Multiple Vendor BIND (NXT Overflow & Denial of Service) Vulnerabilities Source: CCN Type: SuSE Security Announcement #28 bind8 < 8.2.2p2 + bind4 < 4.9.7-REL Source: CCN Type: TurboLinux Security Updates bind-8.2.2P5-1.i386.rpm Source: XF Type: UNKNOWN bind-nxt-bo(3476) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||