CVE-2003-0914

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/10542
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434
http://www.debian.org/security/2004/dsa-409Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/734644Patch, Third Party Advisory, US Government Resource
http://www.trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011
http://secunia.com/advisories/10542
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434
http://www.debian.org/security/2004/dsa-409Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/734644Patch, Third Party Advisory, US Government Resource
http://www.trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011

Timeline

Published: Dec 15, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-09243.7netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.CVE-2003-09257.5Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via CVE-2003-09265.0Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or CVE-2003-09277.5Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute CVE-2003-09287.5Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass int CVE-2003-09297.5Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass inte CVE-2003-09307.5Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypa CVE-2003-09315.0Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to CVE-2003-09324.6Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.CVE-2003-09334.6Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.CVE-2003-09344.6Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to r CVE-2003-09356.4Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.