CVE-2008-0122

Published: Jan 16, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Affected (1)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

1 vulnerable · 42 platform

Vulnerable Software	Affected Versions
Isc Bind	Up to 9.4.2

Running on/with	Platform Versions
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 6.2 p10
Freebsd Freebsd	Version 6.2 p11
Freebsd Freebsd	Version 6.2 p12
Freebsd Freebsd	Version 6.2 p1
Freebsd Freebsd	Version 6.2 p4
Freebsd Freebsd	Version 6.2 p5
Freebsd Freebsd	Version 6.2 p6
Freebsd Freebsd	Version 6.2 p7
Freebsd Freebsd	Version 6.2 p8
Freebsd Freebsd	Version 6.2 p9
Freebsd Freebsd	Version 6.2 rc1
Freebsd Freebsd	Version 6.2 rc2
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 6.3 p10
Freebsd Freebsd	Version 6.3 p11
Freebsd Freebsd	Version 6.3 p12
Freebsd Freebsd	Version 6.3 p13
Freebsd Freebsd	Version 6.3 p14
Freebsd Freebsd	Version 6.3 p15
Freebsd Freebsd	Version 6.3 p1
Freebsd Freebsd	Version 6.3 p2
Freebsd Freebsd	Version 6.3 p3
Freebsd Freebsd	Version 6.3 p4
Freebsd Freebsd	Version 6.3 p5
Freebsd Freebsd	Version 6.3 p6
Freebsd Freebsd	Version 6.3 p7
Freebsd Freebsd	Version 6.3 p8
Freebsd Freebsd	Version 6.3 p9
Freebsd Freebsd	Version 6.3 rc2
Freebsd Freebsd	Version 6.4
Freebsd Freebsd	Version 6.4 p10
Freebsd Freebsd	Version 6.4 p11
Freebsd Freebsd	Version 6.4 p1
Freebsd Freebsd	Version 6.4 p2
Freebsd Freebsd	Version 6.4 p3
Freebsd Freebsd	Version 6.4 p4
Freebsd Freebsd	Version 6.4 p5
Freebsd Freebsd	Version 6.4 p6
Freebsd Freebsd	Version 6.4 p7
Freebsd Freebsd	Version 6.4 p8
Freebsd Freebsd	Version 6.4 p9

Related CWEs

CWE-189

References (62)

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/28367

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/28429

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/28487

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/28579

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/29161

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/29323

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/30313

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/30538

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/30718

Source: secteam@freebsd.org

Third Party Advisory

http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc

Source: secteam@freebsd.org

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1

Source: secteam@freebsd.org

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm

Source: secteam@freebsd.org

Third Party Advisory

http://www.isc.org/index.pl?/sw/bind/bind-security.php

Source: secteam@freebsd.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/203611

Source: secteam@freebsd.org

Third Party AdvisoryUS Government Resource

http://www.redhat.com/support/errata/RHSA-2008-0300.html

Source: secteam@freebsd.org

Third Party Advisory

http://www.securityfocus.com/archive/1/487000/100/0/threaded

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/27283

Source: secteam@freebsd.org

PatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1019189

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/0193

Source: secteam@freebsd.org

Permissions Required

http://www.vupen.com/english/advisories/2008/0703

Source: secteam@freebsd.org

Permissions Required

http://www.vupen.com/english/advisories/2008/1743/references

Source: secteam@freebsd.org

Permissions Required

http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow

Source: secteam@freebsd.org

Third Party Advisory

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167

Source: secteam@freebsd.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=429149

Source: secteam@freebsd.org

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/39670

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488

Source: secteam@freebsd.org

Third Party Advisory

https://issues.rpath.com/browse/RPL-2169

Source: secteam@freebsd.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190

Source: secteam@freebsd.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html

Source: secteam@freebsd.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html

Source: secteam@freebsd.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html