Description
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/25076 ↗
- http://www.vupen.com/english/advisories/2007/2914 ↗
- http://www.securitytracker.com/id?1018441 ↗
- http://www.vupen.com/english/advisories/2007/2628 ↗
- http://secunia.com/advisories/26509 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:149 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35571 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml ↗
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903 ↗
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 ↗
- http://www.isc.org/index.pl?/sw/bind/bind-security.php ↗
- http://secunia.com/advisories/26227 ↗
- http://secunia.com/advisories/26515 ↗
- http://secunia.com/advisories/26236 ↗
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html ↗