CVE-2003-0914

Description

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Risk Information

Base Score

5.3

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

26.754

Associated Vulnerability

Vulnerability	OS Platform
Update bind 8.4.1 to latest version	Windows
Multiple Vulnerabilities are affected in BIND 8.2.4	Windows
Multiple Vulnerabilities are affected in BIND 8.2.3	Windows
Multiple Vulnerabilities are affected in BIND 8.2.5	Windows
Multiple Vulnerabilities are affected in BIND 8.2.6	Windows
Multiple Vulnerabilities are affected in BIND 8.3.0	Windows
Multiple Vulnerabilities are affected in BIND 8.3.1	Windows
Multiple Vulnerabilities are affected in BIND 8.3.2	Windows
Multiple Vulnerabilities are affected in BIND 8.3.3	Windows
Vulnerabilities CVE-2002-2211,CVE-2002-2212,CVE-2002-2213,CVE-2003-0914 are affected in BIND 8.2.7	Windows
Vulnerabilities CVE-2002-2211,CVE-2002-2212,CVE-2002-2213,CVE-2003-0914 are affected in BIND 8.3.4	Windows
Vulnerabilities CVE-2003-0914 are affected in BIND 8.3.5	Windows
Vulnerabilities CVE-2003-0914 are affected in BIND 8.3.6	Windows
Vulnerabilities CVE-2003-0914 are affected in BIND 8.4	Windows
Vulnerabilities CVE-2003-0914 are affected in BIND 8.4.1	Windows
Multiple Vulnerabilities affected in hp-ux 11.11	NCM
CVE-2003-0914	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234