CVE-2001-0012

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.cert.org/advisories/CA-2001-02.html	Patch Third Party Advisory US Government Resource
http://www.debian.org/security/2001/dsa-026
http://www.nai.com/research/covert/advisories/047.asp
http://www.redhat.com/support/errata/RHSA-2001-007.html
http://www.securityfocus.com/bid/2321

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:isc:bind:4.9.3:::::::*
	cpe:2.3:a:isc:bind:4.9.5:::::::*
	cpe:2.3:a:isc:bind:4.9.5:p1::::::
	cpe:2.3:a:isc:bind:4.9.6:::::::*
	cpe:2.3:a:isc:bind:4.9.7:::::::*
	cpe:2.3:a:isc:bind:8.2:::::::*
	cpe:2.3:a:isc:bind:8.2.1:::::::*
	cpe:2.3:a:isc:bind:8.2.2:::::::*
	cpe:2.3:a:isc:bind:8.2.2:p1::::::
	cpe:2.3:a:isc:bind:8.2.2:p2::::::
	cpe:2.3:a:isc:bind:8.2.2:p3::::::
	cpe:2.3:a:isc:bind:8.2.2:p4::::::
	cpe:2.3:a:isc:bind:8.2.2:p5::::::
	cpe:2.3:a:isc:bind:8.2.2:p6::::::
	cpe:2.3:a:isc:bind:8.2.2:p7::::::

History

No history.

Information

Published : 2001-02-12 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2001-0012

Mitre link : CVE-2001-0012

CVE.ORG link : CVE-2001-0012

JSON object : View

Products Affected

isc

bind

CWE

NVD-CWE-Other

{"id": "CVE-2001-0012", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-02-12T05:00:00.000", "references": [{"url": "http://www.cert.org/advisories/CA-2001-02.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2001/dsa-026", "source": "cve@mitre.org"}, {"url": "http://www.nai.com/research/covert/advisories/047.asp", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2001-007.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/2321", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables."}], "lastModified": "2008-09-10T19:07:01.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94C41E69-3034-4E30-A99E-A2C3EE9AE337"}, {"criteria": "cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB7F1274-7E0E-40C8-8006-ACFDBE757D35"}, {"criteria": "cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F96CB4CD-5044-4A08-A6BE-1201C4141851"}, {"criteria": "cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8257C916-6F4D-4B7E-8EED-B2789B3B35AC"}, {"criteria": "cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B959A2AB-703C-4354-8E23-809D2D13EC06"}, {"criteria": "cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93BB48F5-A635-402E-AE7F-B8AB90ED0C70"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5FE281A-610F-42CA-B741-53F2D70A3F38"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEED8045-CEA2-4EBE-A864-22D1B6103F53"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64C3DB3B-4C8E-4647-A61B-ECED4EB63439"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30D2ACB3-BE6D-4948-AFC3-16EAD173F595"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3255FB4-D84E-487B-B53A-4EA01D6613A3"}, {"criteria": "cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2D4EDEB-E366-4F40-B896-7AF14540A14C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}