CVE-2003-0914
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
BIND 8是一款DNS协议实现，named(8)守护程序是Internet域名服务器。 BIND 8存在一个编程错误，远程攻击者可以利用这个漏洞对BIND服务进行拒绝服务攻击。 攻击者可以设置恶意DNS消息提送给目标域名服务器，可导致域名服务器为部分域名缓存一个否定的应答。要执行这个攻击，攻击者必须控制域名服务器，并且目标受害者BIND8查询这个域名服务器。攻击者可以设置一个高的TTL值来保持它的否定记录在目标域名服务器上的缓冲足够长，而这个时候依靠DNS的客户端应用程序将不能进行正常DNS响应。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0914
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ISC BIND否定应答缓冲污染远程拒绝服务攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BIND 8是一款DNS协议实现，named(8)守护程序是Internet域名服务器。 BIND 8存在一个编程错误，远程攻击者可以利用这个漏洞对BIND服务进行拒绝服务攻击。 攻击者可以设置恶意DNS消息提送给目标域名服务器，可导致域名服务器为部分域名缓存一个否定的应答。要执行这个攻击，攻击者必须控制域名服务器，并且目标受害者BIND8查询这个域名服务器。攻击者可以设置一个高的TTL值来保持它的否定记录在目标域名服务器上的缓冲足够长，而这个时候依靠DNS的客户端应用程序将不能进行正常DNS响应。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0914
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0914
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0914 (4)
-
-
-
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011 vdb-entry signature x_refsource_OVAL
Other References for CVE-2003-0914 (4)
-
-
http://www.trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt vendor-advisory x_refsource_TRUSTIX
-
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-003.0/CSSA-2004-003.0.txt vendor-advisory x_refsource_SCO
-
ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.33/CSSA-2003-SCO.33.txt vendor-advisory x_refsource_SCO
Same Patch Batch · n/a · 2003-12-02 · 10 CVEs total
| CVE-2003-0960 | OpenCA多个签名验证漏洞 | |
| CVE-2003-0961 | Linux kernel do_brk()参数边界检查不充分漏洞 | |
| CVE-2003-0967 | FreeRADIUS Tag头字段堆破坏漏洞 | |
| CVE-2003-0968 | FreeRADIUS缓冲区溢出漏洞 | |
| CVE-2003-0970 | Sun Fire系统恶意ARP包远程拒绝服务攻击漏洞 | |
| CVE-2003-0971 | GnuPG ElGamal签名密钥私钥信息泄露漏洞 | |
| CVE-2003-0972 | GNU Screen转义序列缓冲区溢出漏洞 | |
| CVE-2003-0973 | Apache mod_python模块畸形查询远程拒绝服务攻击漏洞 | |
| CVE-2003-0974 | Applied Watch Command Center验证绕过漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2003-0914
No comments yet