Description
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://osvdb.org/69568 ↗
- http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories ↗
- http://securitytracker.com/id?1024817 ↗
- http://www.isc.org/software/bind/advisories/cve-2010-3615 ↗
- http://secunia.com/advisories/42458 ↗
- http://www.securityfocus.com/bid/45134 ↗
- http://www.vupen.com/english/advisories/2010/3102 ↗
- http://secunia.com/advisories/42671 ↗
- http://www.kb.cert.org/vuls/id/510208 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html ↗
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 ↗