CVE-2001-0012 — Bind vulnerability

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
16.7%
top 5.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
ISC Bind
Timeline
PublishedFeb 12
Latest updateApr 30

Description

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDisc/bind7 versions+6

Patches

Patch: www.cert.org ↗Patch: www.cert.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-mw37-2wq7-83rg: BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables↗2022-04-30
▶
CVEList
CVE-2001-0012: BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables↗2001-05-07
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2001-01-29
▶

💬Community

1
Bugzilla
CVE-2001-0012 security flaw↗2018-08-16
▶
CVE-2001-0012 — ISC Bind vulnerability | cvebase