Vulnerability in Isc Bind
CVE-2007-2925
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.
Affected products
- Isc Bind — versions 9.4.0, 9.4.1, 9.5.0
- N/a — versions n/a
References
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (vendor-advisory, x_refsource_GENTOO)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_SLACKWARE)