CVE-2010-3613— ISC BIND named权限许可和访问控制漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND 9.6.2-P3之前的9.6.2版本，9.6-ESV-R3之前的9.6-ESV版本，以及9.7.2-P3之前的9.7.x版本中的named不能正确处理缓存中的符号负值响应匹配相应的RRSIG记录。远程攻击者可以借助对缓冲数据的查询导致拒绝服务(守护程序崩溃)。

CVE-2010-3613 影响 n/a n/a。利用概率较高，应尽快评估。BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND 9.6.2-P3之前的9.6.2版本，9.6-ESV-R3之前的9.6-ESV版本，以及9.7.2-P3之前的9.7.x版本中的named不能正确处理缓存中的符号负值响应匹配相应的RRSIG记录。远程攻击者可以借助对缓冲数据的查询导致拒绝服 CVE-2010-3613 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2010-3613

一、 漏洞 CVE-2010-3613 基础信息

受影响产品

二、漏洞 CVE-2010-3613 的公开POC

三、漏洞 CVE-2010-3613 的情报信息

CVE-2010-3613 厂商安全公告 (24)

• http://support.apple.com/kb/HT5002 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2011-0004.html x_refsource_CONFIRM
• http://secunia.com/advisories/42459 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42671 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/43141 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42522 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/45133 vdb-entry x_refsource_BID
• http://secunia.com/advisories/42707 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42374 third-party-advisory x_refsource_SECUNIA
• http://www.osvdb.org/69558 vdb-entry x_refsource_OSVDB
• http://securitytracker.com/id?1024817 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2010/dsa-2130 vendor-advisory x_refsource_DEBIAN
• http://www.kb.cert.org/vuls/id/706148 third-party-advisory x_refsource_CERT-VN
• http://www.ubuntu.com/usn/USN-1025-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2010/3103 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3139 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3140 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3138 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0267 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3102 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0606 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12601 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/516909/100/0/threaded mailing-list x_refsource_BUGTRAQ

CVE-2010-3613 邮件列表归档 (3)

• http://marc.info/?l=bugtraq&m=130270720601677&w=2 vendor-advisory x_refsource_HP
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html vendor-advisory x_refsource_APPLE
• http://lists.vmware.com/pipermail/security-announce/2011/000126.html mailing-list x_refsource_MLIST

CVE-2010-3613 其他参考 (7)

• http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories x_refsource_CONFIRM
• http://www.isc.org/software/bind/advisories/cve-2010-3613 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100124923 x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0975.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-1000.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0976.html vendor-advisory x_refsource_REDHAT
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 vendor-advisory x_refsource_SLACKWARE

• https://www.cve.org/CVERecord?id=CVE-2010-3613

同批安全公告 · n/a · 2010-12-03 · 共 5 条

IV. Related Vulnerabilities

V. Comments for CVE-2010-3613