Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0122

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Published

2008-01-16T02:00:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	isc	bind	≤ 9.4.2	Yes
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.2	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.3	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No
Operating System	freebsd	freebsd	6.4	No

References

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html Mailing List, Third Party Advisory ([email protected])
http://secunia.com/advisories/28367 Third Party Advisory ([email protected])
http://secunia.com/advisories/28429 Third Party Advisory ([email protected])
http://secunia.com/advisories/28487 Third Party Advisory ([email protected])
http://secunia.com/advisories/28579 Third Party Advisory ([email protected])
http://secunia.com/advisories/29161 Third Party Advisory ([email protected])
http://secunia.com/advisories/29323 Third Party Advisory ([email protected])
http://secunia.com/advisories/30313 Third Party Advisory ([email protected])
http://secunia.com/advisories/30538 Third Party Advisory ([email protected])
http://secunia.com/advisories/30718 Third Party Advisory ([email protected])
http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc Patch, Vendor Advisory ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1 Broken Link ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm Third Party Advisory ([email protected])
http://www.isc.org/index.pl?/sw/bind/bind-security.php Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/203611 Third Party Advisory, US Government Resource ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0300.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/487000/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/27283 Patch, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1019189 Third Party Advisory, VDB Entry ([email protected])
http://www.vupen.com/english/advisories/2008/0193 Permissions Required ([email protected])
http://www.vupen.com/english/advisories/2008/0703 Permissions Required ([email protected])
http://www.vupen.com/english/advisories/2008/1743/references Permissions Required ([email protected])
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow Third Party Advisory ([email protected])
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=429149 Issue Tracking, Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/39670 Third Party Advisory, VDB Entry ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 Third Party Advisory ([email protected])
https://issues.rpath.com/browse/RPL-2169 Third Party Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190 Third Party Advisory ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html Third Party Advisory ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28367 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28429 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28487 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28579 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29161 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29323 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30313 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30538 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30718 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.isc.org/index.pl?/sw/bind/bind-security.php Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/203611 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0300.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/487000/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/27283 Patch, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019189 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0193 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0703 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1743/references Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=429149 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/39670 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-2169 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)