Overview
There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's (ISC) BIND software. This vulnerability is referred to by the ISC as the "srv bug" and affects ISC BIND versions 8.2 through 8.2.2-P6.
Description
This vulnerability can cause affected DNS servers running named to go into an infinite loop, thus preventing further name requests to be handled. This can happen if an SRV record (defined in RFC2782) is sent to the vulnerable server. Microsoft's Windows 2000 Active Directory service makes extensive use of SRV records and is reportedly capable of triggering this bug in the course of normal operations. This is not, however, a vulnerability in Microsoft Active Directory. Any network client capable of sending SRV records to vulnerable name server systems can exercise this vulnerability. |
Impact
A remote attacker can use malicious SRV records to crash vulnerable BIND servers, resulting in a denial-of-service condition that disables name resolution service. |
Solution
Apply a patch from your vendor |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
The CERT Coordination Center thanks Mark Andrews, David Conrad, and Paul Vixie of the ISC for developing a solution and assisting in the preparation of this document.
This document was written by Jeffrey S. Havrilla and Jeffrey P. Lanza.
Other Information
| CVE IDs: | CVE-2000-0888 |
| CERT Advisory: | CA-2000-20 |
| Severity Metric: | 16.71 |
| Date Public: | 2000-11-07 |
| Date First Published: | 2001-05-11 |
| Date Last Updated: | 2002-01-25 21:41 UTC |
| Document Revision: | 10 |