FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4095

This CVE name corresponds to:

Entered	Topic
2006-12-19	bind9 -- Denial of Service in named(8)

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-4095 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-4095
Phase	Assigned(20060814)

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.

References

Source	Reference
BUGTRAQ	20060908 rPSA-2006-0166-1 bind bind-utils
MISC	http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en
CONFIRM	https://issues.rpath.com/browse/RPL-626
CONFIRM	http://docs.info.apple.com/article.html?artnum=305530
APPLE	APPLE-SA-2007-05-24
DEBIAN	DSA-1172
FREEBSD	FreeBSD-SA-06:20.bind
GENTOO	GLSA-200609-11
HP	HPSBTU02207
HP	SSRT061213
HP	SSRT061239
HP	SSRT071304
MANDRIVA	MDKSA-2006:163
OPENBSD	[3.9] 20060908 010: SECURITY FIX: September 8, 2006
OPENPKG	OpenPKG-SA-2006.019
SLACKWARE	SSA:2006-257-01
SUSE	SUSE-SR:2006:023
SUSE	SUSE-SR:2006:024
UBUNTU	USN-343-1
CERT-VN	VU#915404
BID	19859
VUPEN	ADV-2006-3473
VUPEN	ADV-2007-1401
VUPEN	ADV-2007-1939
SECTRACK	1016794
SECUNIA	21752
SECUNIA	21816
SECUNIA	21786
SECUNIA	21818
SECUNIA	21828
SECUNIA	21835
SECUNIA	21838
SECUNIA	21912
SECUNIA	21926
SECUNIA	22298
SECUNIA	24950
SECUNIA	25402
XF	bind-dnssec-rrset-dos(28745)