full-disclosure - !ADVISORY! $ +Thu Mar 16 14:08:58 EST 2006+ $ Integer Overflow in ISC BIND

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060316190900.5B4D65092@lists.grok.org.uk>
Date: Thu Mar 16 20:48:51 2006
From: pokleyzz at scan-associates.net (pokley)
Subject: !ADVISORY! $ +Thu Mar 16 14:08:58 EST 2006+ $
	Integer Overflow in ISC BIND




!ADVISORY! $ +Thu Mar 16 14:08:58 EST 2006+ $ Integer Overflow in ISC BIND




+++++++++++++++++++++++++++++++++++++++++++++++++++++++
1. Description
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
ISC BIND incorrectly parses integer data, and this can be used to execute arbitrary code.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++
2. Vendor Response
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
ISC BIND had presented no commentary.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
Appendix A Vendor Information
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
http://www.isc.org/index.pl?/sw/bind/



+++++++++++++++++++++++++++++++++++++++++++++++++++++++
Contact
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
pokley pokleyzz@...n-associates.net

GSAE CCE CSFA GREM GIPS GHTQ GWAS