CVE

Id
41037  
CVE No.
CVE-2009-3602  
Status
Candidate  
Description
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.  
Phase
Assigned (20091009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
449914 41037 CVE-2009-3602 MLIST:[Unbound-users] 20091007 Release of unbound 1.3.4  View
449915 41037 CVE-2009-3602 URL:http://unbound.net/pipermail/unbound-users/2009-October/000852.html  View
449916 41037 CVE-2009-3602 MLIST:[oss-security] 20091009 CVE request: Unbound  View
449917 41037 CVE-2009-3602 URL:http://www.openwall.com/lists/oss-security/2009/10/09/2  View
449918 41037 CVE-2009-3602 MLIST:[oss-security] 20091009 Re: CVE request: Unbound  View
449919 41037 CVE-2009-3602 URL:http://www.openwall.com/lists/oss-security/2009/10/09/3  View
449920 41037 CVE-2009-3602 DEBIAN:DSA-1963  View
449921 41037 CVE-2009-3602 URL:http://www.debian.org/security/2009/dsa-1963  View
449922 41037 CVE-2009-3602 OSVDB:58836  View
449923 41037 CVE-2009-3602 URL:http://osvdb.org/58836  View
449924 41037 CVE-2009-3602 SECUNIA:36996  View
449925 41037 CVE-2009-3602 URL:http://secunia.com/advisories/36996  View
449926 41037 CVE-2009-3602 SECUNIA:37913  View
449927 41037 CVE-2009-3602 URL:http://secunia.com/advisories/37913  View
449928 41037 CVE-2009-3602 VUPEN:ADV-2009-2875  View
449929 41037 CVE-2009-3602 URL:http://www.vupen.com/english/advisories/2009/2875  View
449930 41037 CVE-2009-3602 XF:unbound-nsec3-security-bypass(53729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41254 JVNDB-2009-002261 Xpdf および Poppler の PSOutputDev::doImageL1Sep 関数における整数オーバーフローの脆弱性 Xpdf および Poppler の PSOutputDev::doImageL1Sep 関数には、PDF ドキュメントの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-3606 41037 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002261.html  View