NVD

Id
51175  
Name
CVE-2009-4022  
Description
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-11-25  
Modified Date
2016-12-06  
Seq
2009-4022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259532 51175 CVE-2009-4022 ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt  View
259533 51175 CVE-2009-4022 http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc  View
259534 51175 CVE-2009-4022 APPLE-SA-2011-10-12-3  View
259535 51175 CVE-2009-4022 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
259536 51175 CVE-2009-4022 oval:org.mitre.oval:def:10821  View
259537 51175 CVE-2009-4022 oval:org.mitre.oval:def:11745  View
259538 51175 CVE-2009-4022 oval:org.mitre.oval:def:7261  View
259539 51175 CVE-2009-4022 oval:org.mitre.oval:def:7459  View
259540 51175 CVE-2009-4022 1021660  View
259541 51175 CVE-2009-4022 1021798  View
259542 51175 CVE-2009-4022 http://support.apple.com/kb/HT5002  View
259543 51175 CVE-2009-4022 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018  View
259544 51175 CVE-2009-4022 IZ68597  View
259545 51175 CVE-2009-4022 IZ71667  View
259546 51175 CVE-2009-4022 IZ71774  View
259547 51175 CVE-2009-4022 VU#418861  View
259548 51175 CVE-2009-4022 MDVSA-2009:304  View
259549 51175 CVE-2009-4022 [oss-security] 20091124 a new bind issue  View
259550 51175 CVE-2009-4022 [oss-security] 20091124 CVE request: BIND 9 bug involving DNSSEC and the additional section  View
259551 51175 CVE-2009-4022 [oss-security] 20091124 Re: a new bind issue  View
259552 51175 CVE-2009-4022 RHSA-2009:1620  View
259553 51175 CVE-2009-4022 37118  View
259554 51175 CVE-2009-4022 USN-888-1  View
259555 51175 CVE-2009-4022 ADV-2009-3335  View
259556 51175 CVE-2009-4022 ADV-2010-0176  View
259557 51175 CVE-2009-4022 ADV-2010-0528  View
259558 51175 CVE-2009-4022 ADV-2010-0622  View
259559 51175 CVE-2009-4022 bind-dnssec-cache-poisoning(54416)  View
259560 51175 CVE-2009-4022 https://bugzilla.redhat.com/show_bug.cgi?id=538744  View
259561 51175 CVE-2009-4022 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488  View
259562 51175 CVE-2009-4022 https://issues.rpath.com/browse/RPL-3152  View
259563 51175 CVE-2009-4022 https://www.isc.org/advisories/CVE-2009-4022v6  View
259564 51175 CVE-2009-4022 https://www.isc.org/advisories/CVE2009-4022  View
259565 51175 CVE-2009-4022 FEDORA-2009-12218  View
259566 51175 CVE-2009-4022 FEDORA-2009-12233  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41404 JVNDB-2009-002411 BIND 9 の DNSSEC 検証処理における脆弱性 DNSSEC を有効にしている BIND 9 において、再帰的なクライアントクエリを処理する際に脆弱性が存在します。 CVE-2009-4022 41453 CVE-2009-4022 51175 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002411.html 2009-12-02 2010-10-01 View