FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4096

This CVE name corresponds to:

Entered	Topic
2006-12-19	bind9 -- Denial of Service in named(8)

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-4096 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-4096
Phase	Assigned(20060814)

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

References

Source	Reference
BUGTRAQ	20060908 rPSA-2006-0166-1 bind bind-utils
MISC	http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en
CONFIRM	https://issues.rpath.com/browse/RPL-626
CONFIRM	http://docs.info.apple.com/article.html?artnum=305530
AIXAPAR	IY89169
AIXAPAR	IY89178
APPLE	APPLE-SA-2007-05-24
DEBIAN	DSA-1172
FREEBSD	FreeBSD-SA-06:20.bind
GENTOO	GLSA-200609-11
HP	HPSBTU02207
HP	SSRT061213
HP	SSRT061239
HP	SSRT071304
HP	HPSBOV03226
HP	SSRT101004
MANDRIVA	MDKSA-2006:163
OPENBSD	[3.9] 20060908 010: SECURITY FIX: September 8, 2006
OPENPKG	OpenPKG-SA-2006.019
SLACKWARE	SSA:2006-257-01
SUSE	SUSE-SR:2006:023
SUSE	SUSE-SR:2006:024
UBUNTU	USN-343-1
CERT-VN	VU#697164
BID	19859
OVAL	oval:org.mitre.oval:def:9623
VUPEN	ADV-2006-3473
VUPEN	ADV-2006-3511
VUPEN	ADV-2007-1401
VUPEN	ADV-2007-1939
SECTRACK	1016794
SECUNIA	21752
SECUNIA	21816
SECUNIA	21786
SECUNIA	21790
SECUNIA	21818
SECUNIA	21828
SECUNIA	21835
SECUNIA	21838
SECUNIA	21912
SECUNIA	21926
SECUNIA	22298
SECUNIA	24950
SECUNIA	25402
XF	bind-recursive-insist-dos(28744)