CVE-2009-0025

Published: Jan 7, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

Affected (97)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

97 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.0 rc1
Isc Bind	Version 9.0.0 rc2
Isc Bind	Version 9.0.0 rc3
Isc Bind	Version 9.0.0 rc4
Isc Bind	Version 9.0.0 rc5
Isc Bind	Version 9.0.0 rc6
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0.1 rc1
Isc Bind	Version 9.0.1 rc2
Isc Bind	Version 9.0
Isc Bind	Version 9.1.0 rc1
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.1 rc1
Isc Bind	Version 9.1.1 rc2
Isc Bind	Version 9.1.1 rc3
Isc Bind	Version 9.1.1 rc4
Isc Bind	Version 9.1.1 rc5
Isc Bind	Version 9.1.1 rc6
Isc Bind	Version 9.1.1 rc7
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.2 rc1
Isc Bind	Version 9.1.3
Isc Bind	Version 9.1.3 rc1
Isc Bind	Version 9.1.3 rc2
Isc Bind	Version 9.1.3 rc3
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.0 a1
Isc Bind	Version 9.2.0 a2
Isc Bind	Version 9.2.0 a3
Isc Bind	Version 9.2.0 b1
Isc Bind	Version 9.2.0 b2
Isc Bind	Version 9.2.0 rc10
Isc Bind	Version 9.2.0 rc1
Isc Bind	Version 9.2.0 rc2
Isc Bind	Version 9.2.0 rc3
Isc Bind	Version 9.2.0 rc4
Isc Bind	Version 9.2.0 rc5
Isc Bind	Version 9.2.0 rc6
Isc Bind	Version 9.2.0 rc7
Isc Bind	Version 9.2.0 rc8
Isc Bind	Version 9.2.0 rc9
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.1 rc1
Isc Bind	Version 9.2.1 rc2
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.2 rc1
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.3 rc1
Isc Bind	Version 9.2.3 rc2
Isc Bind	Version 9.2.3 rc3
Isc Bind	Version 9.2.3 rc4
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.4 rc2
Isc Bind	Version 9.2.4 rc3
Isc Bind	Version 9.2.4 rc4
Isc Bind	Version 9.2.4 rc5
Isc Bind	Version 9.2.4 rc6
Isc Bind	Version 9.2.4 rc7
Isc Bind	Version 9.2.4 rc8
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.5 b2
Isc Bind	Version 9.2.5 rc1
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.6 rc1
Isc Bind	Version 9.2.7
Isc Bind	Version 9.2.7 rc1
Isc Bind	Version 9.2.7 rc2
Isc Bind	Version 9.2.7 rc3
Isc Bind	Version 9.4.0
Isc Bind	Version 9.4.0 a1
Isc Bind	Version 9.4.0 a2
Isc Bind	Version 9.4.0 a3
Isc Bind	Version 9.4.0 a4
Isc Bind	Version 9.4.0 a5
Isc Bind	Version 9.4.0 a6
Isc Bind	Version 9.4.0 b1
Isc Bind	Version 9.4.0 b2
Isc Bind	Version 9.4.0 b3
Isc Bind	Version 9.4.0 b4
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.4.0 rc2
Isc Bind	Version 9.4.1
Isc Bind	Version 9.4.2
Isc Bind	Version 9.4.2 rc1
Isc Bind	Version 9.4.2 rc2
Isc Bind	Version 9.4.3
Isc Bind	Version 9.4.3 b1
Isc Bind	Version 9.4.3 b2
Isc Bind	Version 9.4.3 b3
Isc Bind	Version 9.4.3 rc1
Isc Bind	Version 9.4
Isc Bind	Version 9.5.0
Isc Bind	Version 9.5.1
Isc Bind	Version 9.6.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (66)

http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=141879471518471&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/33494

Source: secalert@redhat.com

http://secunia.com/advisories/33546

Source: secalert@redhat.com

http://secunia.com/advisories/33551

Source: secalert@redhat.com

http://secunia.com/advisories/33559

Source: secalert@redhat.com

http://secunia.com/advisories/33683

Source: secalert@redhat.com

http://secunia.com/advisories/33882

Source: secalert@redhat.com

http://secunia.com/advisories/35074

Source: secalert@redhat.com

http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1

Source: secalert@redhat.com

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2009-0009

Source: secalert@redhat.com

http://www.ocert.org/advisories/ocert-2008-016.html

Source: secalert@redhat.com

http://www.openbsd.org/errata44.html#008_bind

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/499827/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/500207/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/502322/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/33151

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2009-0004.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0043

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0366

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0904

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2938

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569

Source: secalert@redhat.com

https://www.isc.org/software/bind/advisories/cve-2009-0025

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html

Source: secalert@redhat.com

http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33