CVE-2002-0029
published 2002-11-29CVE-2002-0029: Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote…
PriorityP333high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
9.86%
95.2th percentile
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| debian | bind9 | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wc7g-r6mj-mjf6: Buffer overflows in the DNS stub resolver library in ISC BIND 4
ghsa_unreviewed·2022-05-03·CVSS 7.5
CVE-2002-0029 [HIGH] GHSA-wc7g-r6mj-mjf6: Buffer overflows in the DNS stub resolver library in ISC BIND 4
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Red Hat
security flaw
vendor_redhat·2002-11-12·CVSS 7.5
CVE-2002-0029 [HIGH] security flaw
security flaw
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Debian
CVE-2002-0029: bind9 - Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9....
vendor_debian·2002·CVSS 7.5
CVE-2002-0029 [HIGH] CVE-2002-0029: bind9 - Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9....
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.ascftp://patches.sgi.com/support/free/security/advisories/20021201-01-Phttp://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.htmlhttp://www.cert.org/advisories/CA-2002-31.htmlhttp://www.isc.org/products/BIND/bind-security.htmlhttp://www.iss.net/security_center/static/10624.phphttp://www.kb.cert.org/vuls/id/844360http://www.securityfocus.com/bid/6186ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.ascftp://patches.sgi.com/support/free/security/advisories/20021201-01-Phttp://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.htmlhttp://www.cert.org/advisories/CA-2002-31.htmlhttp://www.isc.org/products/BIND/bind-security.htmlhttp://www.iss.net/security_center/static/10624.phphttp://www.kb.cert.org/vuls/id/844360http://www.securityfocus.com/bid/6186
2002-11-29
Published