Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-6230

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask.

Published

2013-11-08T04:47:23.087

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.6 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.0 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.1 Yes
Application isc bind 9.8.2 Yes
Application isc bind 9.8.2 Yes
Application isc bind 9.8.2 Yes
Application isc bind 9.8.3 Yes
Application isc bind 9.8.3 Yes
Application isc bind 9.8.3 Yes
Application isc bind 9.8.4 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.5 Yes
Application isc bind 9.8.6 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.0 Yes
Application isc bind 9.9.1 Yes
Application isc bind 9.9.1 Yes
Application isc bind 9.9.1 Yes
Application isc bind 9.9.2 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.3 Yes
Application isc bind 9.9.4 Yes
References