ISC BIND 8.2.2-P5 - Denial of Service



EKU-ID: 25948 CVE: CVE-2000-0887;OSVDB-448 OSVDB-ID:
Author: Fabio Pietrosanti Published: 2000-11-01 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/1923/info

BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations.

The problem occurs in the Compressed Zone Transfer (ZXFR) functionality of BIND. A default installation of BIND does not support the transfer of compressed zone files. However, daemon that allows zone transfers and recursive queries will crash if queried for a compressed zone transfer that is not in the nameserver cache. This could result in a name resolution Denial of Service for all users and systems depending upon nameservers using the affected software.

named-xfer -z zone.pippo.com -d 9 -f pics -Z dns.pippo.com