CVE-2007-2925
CVE-2007-2925
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
EPSS 6.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.securityfocus.com/bid/25076
- http://www.vupen.com/english/advisories/2007/2914
- http://www.securitytracker.com/id?1018441
- http://www.vupen.com/english/advisories/2007/2628
- http://secunia.com/advisories/26509
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35571
- http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- http://secunia.com/advisories/26227
- http://secunia.com/advisories/26515
- http://secunia.com/advisories/26236
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
- https://nvd.nist.gov/vuln/detail/CVE-2007-2925