[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-3614Date: (C)2010-12-06   (M)2023-12-22


named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.4
Exploit Score: 10.0
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1024817
http://www.securityfocus.com/archive/1/516909/100/0/threaded
SECUNIA-42435
SECUNIA-42459
SECUNIA-42522
SECUNIA-42671
BID-45137
OSVDB-69559
ADV-2010-3102
ADV-2010-3103
ADV-2010-3138
ADV-2010-3139
ADV-2010-3140
ADV-2011-0606
APPLE-SA-2011-10-12-3
DSA-2130
FEDORA-2010-18469
FEDORA-2010-18521
MDVSA-2010:253
RHSA-2010:0975
RHSA-2010:0976
SSA:2010-350-01
USN-1025-1
VU#837744
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://support.apple.com/kb/HT5002
http://support.avaya.com/css/P8/documents/100124923
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories
http://www.isc.org/software/bind/advisories/cve-2010-3614
http://www.vmware.com/security/advisories/VMSA-2011-0004.html

CPE    236
cpe:/a:isc:bind:9.2.4:rc2
cpe:/a:isc:bind:9.2.4:rc3
cpe:/a:isc:bind:9.3.1:rc1
cpe:/a:isc:bind:9.2.4:rc4
...
CWE    1
CWE-20
OVAL    14
oval:org.secpod.oval:def:500430
oval:org.secpod.oval:def:500338
oval:org.secpod.oval:def:3116
oval:org.secpod.oval:def:1100042
...

© SecPod Technologies