CVE - CVE-2007-0493

CVE-ID
CVE-2007-0493	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1017561 URL:http://securitytracker.com/id?1017561 MISC:2007-0005 URL:~~http://www.trustix.org/errata/2007/0005~~ (Obsolete source - check if archived by the Wayback Machine) MISC:20070125 BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.] URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052018.html MISC:20070125 BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.] URL:http://www.securityfocus.com/archive/1/458066/100/0/threaded MISC:22229 URL:http://www.securityfocus.com/bid/22229 MISC:23904 URL:http://secunia.com/advisories/23904 MISC:23924 URL:http://secunia.com/advisories/23924 MISC:23943 URL:http://secunia.com/advisories/23943 MISC:23972 URL:http://secunia.com/advisories/23972 MISC:23974 URL:http://secunia.com/advisories/23974 MISC:23977 URL:http://secunia.com/advisories/23977 MISC:24014 URL:http://secunia.com/advisories/24014 MISC:24048 URL:http://secunia.com/advisories/24048 MISC:24054 URL:http://secunia.com/advisories/24054 MISC:24129 URL:http://secunia.com/advisories/24129 MISC:24203 URL:http://secunia.com/advisories/24203 MISC:24930 URL:http://secunia.com/advisories/24930 MISC:24950 URL:http://secunia.com/advisories/24950 MISC:25402 URL:http://secunia.com/advisories/25402 MISC:25649 URL:http://secunia.com/advisories/25649 MISC:ADV-2007-0349 URL:~~http://www.vupen.com/english/advisories/2007/0349~~ (Obsolete source) MISC:ADV-2007-1401 URL:~~http://www.vupen.com/english/advisories/2007/1401~~ (Obsolete source) MISC:ADV-2007-1939 URL:~~http://www.vupen.com/english/advisories/2007/1939~~ (Obsolete source) MISC:ADV-2007-2163 URL:~~http://www.vupen.com/english/advisories/2007/2163~~ (Obsolete source) MISC:ADV-2007-2315 URL:~~http://www.vupen.com/english/advisories/2007/2315~~ (Obsolete source) MISC:APPLE-SA-2007-05-24 URL:http://lists.apple.com/archives/security-announce/2007/May/msg00004.html MISC:FEDORA-2007-147 URL:http://fedoranews.org/cms/node/2507 MISC:FEDORA-2007-164 URL:http://fedoranews.org/cms/node/2537 MISC:FreeBSD-SA-07:02 URL:http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc MISC:GLSA-200702-06 URL:http://security.gentoo.org/glsa/glsa-200702-06.xml MISC:HPSBTU02207 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:HPSBUX02219 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 MISC:MDKSA-2007:030 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2007:030~~ (Obsolete source) MISC:NetBSD-SA2007-003 URL:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc MISC:OpenPKG-SA-2007.007 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html MISC:RHSA-2007:0057 URL:http://www.redhat.com/support/errata/RHSA-2007-0057.html MISC:SSA:2007-026-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 MISC:SSRT061213 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:SSRT061239 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:SSRT061273 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 MISC:SSRT071304 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:SUSE-SA:2007:014 URL:http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html MISC:USN-418-1 URL:http://www.ubuntu.com/usn/usn-418-1 MISC:[bind-announce] 20070125 Internet Systems Consortium Security Advisory. URL:http://marc.info/?l=bind-announce&m=116968519321296&w=2 MISC:http://docs.info.apple.com/article.html?artnum=305530 URL:http://docs.info.apple.com/article.html?artnum=305530 MISC:http://www.isc.org/index.pl?/sw/bind/bind-security.php URL:http://www.isc.org/index.pl?/sw/bind/bind-security.php MISC:http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 URL:http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 MISC:http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 URL:http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 MISC:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 URL:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 MISC:https://issues.rpath.com/browse/RPL-989 URL:https://issues.rpath.com/browse/RPL-989 MISC:oval:org.mitre.oval:def:9614 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9614
Assigning CNA
Red Hat, Inc.
Date Record Created
20070125	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070125)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)