CVE - CVE-2007-0493

CVE-ID
CVE-2007-0493	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070125 BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.] URL:http://www.securityfocus.com/archive/1/458066/100/0/threaded FULLDISC:20070125 BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.] URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052018.html MLIST:[bind-announce] 20070125 Internet Systems Consortium Security Advisory. URL:http://marc.info/?l=bind-announce&m=116968519321296&w=2 CONFIRM:http://www.isc.org/index.pl?/sw/bind/bind-security.php CONFIRM:http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 CONFIRM:http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 CONFIRM:https://issues.rpath.com/browse/RPL-989 CONFIRM:http://docs.info.apple.com/article.html?artnum=305530 CONFIRM:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 APPLE:APPLE-SA-2007-05-24 URL:http://lists.apple.com/archives/security-announce/2007/May/msg00004.html FEDORA:FEDORA-2007-147 URL:http://fedoranews.org/cms/node/2507 FEDORA:FEDORA-2007-164 URL:http://fedoranews.org/cms/node/2537 FREEBSD:FreeBSD-SA-07:02 URL:http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc GENTOO:GLSA-200702-06 URL:http://security.gentoo.org/glsa/glsa-200702-06.xml HP:HPSBTU02207 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:SSRT061213 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:SSRT061239 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:SSRT071304 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:HPSBUX02219 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 HP:SSRT061273 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 MANDRIVA:MDKSA-2007:030 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 NETBSD:NetBSD-SA2007-003 URL:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc OPENPKG:OpenPKG-SA-2007.007 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html REDHAT:RHSA-2007:0057 URL:http://www.redhat.com/support/errata/RHSA-2007-0057.html SLACKWARE:SSA:2007-026-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 SUSE:SUSE-SA:2007:014 URL:http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html TRUSTIX:2007-0005 URL:http://www.trustix.org/errata/2007/0005 UBUNTU:USN-418-1 URL:http://www.ubuntu.com/usn/usn-418-1 BID:22229 URL:http://www.securityfocus.com/bid/22229 OVAL:oval:org.mitre.oval:def:9614 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9614 VUPEN:ADV-2007-0349 URL:http://www.vupen.com/english/advisories/2007/0349 VUPEN:ADV-2007-1401 URL:http://www.vupen.com/english/advisories/2007/1401 VUPEN:ADV-2007-1939 URL:http://www.vupen.com/english/advisories/2007/1939 VUPEN:ADV-2007-2163 URL:http://www.vupen.com/english/advisories/2007/2163 VUPEN:ADV-2007-2315 URL:http://www.vupen.com/english/advisories/2007/2315 SECTRACK:1017561 URL:http://securitytracker.com/id?1017561 SECUNIA:23904 URL:http://secunia.com/advisories/23904 SECUNIA:23972 URL:http://secunia.com/advisories/23972 SECUNIA:23924 URL:http://secunia.com/advisories/23924 SECUNIA:23943 URL:http://secunia.com/advisories/23943 SECUNIA:23974 URL:http://secunia.com/advisories/23974 SECUNIA:23977 URL:http://secunia.com/advisories/23977 SECUNIA:24054 URL:http://secunia.com/advisories/24054 SECUNIA:24014 URL:http://secunia.com/advisories/24014 SECUNIA:24048 URL:http://secunia.com/advisories/24048 SECUNIA:24129 URL:http://secunia.com/advisories/24129 SECUNIA:24203 URL:http://secunia.com/advisories/24203 SECUNIA:24950 URL:http://secunia.com/advisories/24950 SECUNIA:24930 URL:http://secunia.com/advisories/24930 SECUNIA:25402 URL:http://secunia.com/advisories/25402 SECUNIA:25649 URL:http://secunia.com/advisories/25649
Assigning CNA
N/A
Date Entry Created
20070125	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070125)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org