Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND named权限许可和访问控制漏洞
Vulnerability Description
BIND是一个应用非常广泛的DNS协议的实现,由ISC负责维护,具体的开发由Nominum公司完成。 ISC BIND 9.7.2-P2版本中的named没有为允许查询的ACL检查所有预设位置。远程攻击者可以借助标准DNS查询机制为私有DNS记录实现成功请求。
CVSS Information
N/A
Vulnerability Type
N/A