CVE-2002-0684
published 2002-08-12CVE-2002-0684: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier…
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
5.86%
92.4th percentile
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| astaro | security_linux | — | — |
| debian | bind9 | — | — |
| debian | glibc | < glibc 2.2.5-8 (bookworm) | glibc 2.2.5-8 (bookworm) |
| gnu | glibc | <= 2.2.5 | — |
| gnu | glibc | >= 0 < 2.2.5-8 | 2.2.5-8 |
| gnu | glibc | >= 0 < 2.2.5-8 | 2.2.5-8 |
| gnu | glibc | >= 0 < 2.2.5-8 | 2.2.5-8 |
| gnu | glibc | >= 0 < 2.2.5-8 | 2.2.5-8 |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2002-11-12·CVSS 7.5
CVE-2002-0029 [HIGH] security flaw
security flaw
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Red Hat
security flaw
vendor_redhat·2002-06-26·CVSS 7.5
CVE-2002-0684 [HIGH] security flaw
security flaw
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Debian
CVE-2002-0684: glibc - Buffer overflow in DNS resolver functions that perform lookup of network names a...
vendor_debian·2002·CVSS 7.5
CVE-2002-0684 [HIGH] CVE-2002-0684: glibc - Buffer overflow in DNS resolver functions that perform lookup of network names a...
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Scope: local
bookworm: resolved (fixed in 2.2.5-8)
bullseye: resolved (fixed in 2.2.5-8)
forky: resolved (fixed in 2.2.5-8)
sid: resolved (fixed in 2.2.5-8)
trixie: resolved (fixed in 2.2.5-8)
Debian
CVE-2002-0029: bind9 - Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9....
vendor_debian·2002·CVSS 7.5
CVE-2002-0029 [HIGH] CVE-2002-0029: bind9 - Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9....
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-wc7g-r6mj-mjf6: Buffer overflows in the DNS stub resolver library in ISC BIND 4
ghsa_unreviewed·2022-05-03·CVSS 7.5
CVE-2002-0029 [HIGH] GHSA-wc7g-r6mj-mjf6: Buffer overflows in the DNS stub resolver library in ISC BIND 4
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
GHSA
GHSA-w4pr-xjh8-387g: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4
ghsa_unreviewed·2022-04-30
CVE-2002-0684 [HIGH] GHSA-w4pr-xjh8-387g: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
OSV
CVE-2002-0684: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4
osv·2002-08-12·CVSS 7.5
CVE-2002-0684 [HIGH] CVE-2002-0684: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2002-0029 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2002-0029 [HIGH] CVE-2002-0029 security flaw
CVE-2002-0029 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Bugzilla
CVE-2002-0684 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2002-0684 [HIGH] CVE-2002-0684 security flaw
CVE-2002-0684 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507http://marc.info/?l=bugtraq&m=102581482511612&w=2http://rhn.redhat.com/errata/RHSA-2002-139.htmlhttp://www.kb.cert.org/vuls/id/542971http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.phphttp://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507http://marc.info/?l=bugtraq&m=102581482511612&w=2http://rhn.redhat.com/errata/RHSA-2002-139.htmlhttp://www.kb.cert.org/vuls/id/542971http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php
2002-08-12
Published