CVE-2010-3614

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在实现上存在安全漏洞，攻击者可利用此漏洞影响应用程序的完整安全属性。 在DNSKEY算法更新时，当运用了两个不同的运算规则来签署区域，但仅新密钥集在区域DNSKEY RRset时，会出现此漏洞。

CVE-2010-3614 affects n/a n/a. High exploitation probability; assess promptly. BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在实现上存在安全漏洞，攻击者可利用此漏洞影响应用程序的完整安全属性。 在DNSKEY算法更新时，当运用了两个不同的运算规则来签署区域，但仅新密钥集在区域DNSKEY RRset时，会出现此漏洞。 CVE-2010-3614 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2010-3614

I. Basic Information for CVE-2010-3614

Affected Products

II. Public POCs for CVE-2010-3614

III. Intelligence Information for CVE-2010-3614

Vendor Advisories for CVE-2010-3614 (20)

• http://www.vmware.com/security/advisories/VMSA-2011-0004.html x_refsource_CONFIRM
• http://support.apple.com/kb/HT5002 x_refsource_CONFIRM
• http://secunia.com/advisories/42671 third-party-advisory x_refsource_SECUNIA
• http://www.osvdb.org/69559 vdb-entry x_refsource_OSVDB
• http://secunia.com/advisories/42459 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/45137 vdb-entry x_refsource_BID
• http://secunia.com/advisories/42435 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42522 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1024817 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2010/dsa-2130 vendor-advisory x_refsource_DEBIAN
• http://www.kb.cert.org/vuls/id/837744 third-party-advisory x_refsource_CERT-VN
• http://www.ubuntu.com/usn/USN-1025-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2010/3103 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3102 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0606 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3139 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3140 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2010/3138 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 vendor-advisory x_refsource_MANDRIVA
• http://www.securityfocus.com/archive/1/516909/100/0/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2010-3614 (2)

• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html vendor-advisory x_refsource_APPLE
• http://lists.vmware.com/pipermail/security-announce/2011/000126.html mailing-list x_refsource_MLIST

Other References for CVE-2010-3614 (6)

• http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories x_refsource_CONFIRM
• http://www.isc.org/software/bind/advisories/cve-2010-3614 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100124923 x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0975.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0976.html vendor-advisory x_refsource_REDHAT
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 vendor-advisory x_refsource_SLACKWARE

• https://www.cve.org/CVERecord?id=CVE-2010-3614

Same Patch Batch · n/a · 2010-12-03 · 5 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2010-3614