Vulnerabilities > CVE-2009-0265 - Unchecked Return Value vulnerability in ISC Bind

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

isc

CWE-252

nessus

NVD

Published: 2009-01-26

Updated: 2024-02-13

Summary

Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025.

Vulnerable Configurations

Part	Description	Count
Application	Isc ISC Bind - ISC Bind 4 ISC Bind 4.9 ISC Bind 4.9.2 ISC Bind 4.9.3 ISC Bind 4.9.4 ISC Bind 4.9.5 ISC Bind 4.9.6 ISC Bind 4.9.7 ISC Bind 4.9.8 ISC Bind 4.9.9 ISC Bind 4.9.10 ISC Bind 8 ISC Bind 8.1 ISC Bind 8.1.1 ISC Bind 8.1.2 ISC Bind 8.2 ISC Bind 8.2.1 ISC Bind 8.2.2 ISC Bind 8.2.3 ISC Bind 8.2.3_T1A ISC Bind 8.2.3_T9B ISC Bind 8.2.4 ISC Bind 8.2.5 ISC Bind 8.2.6 ISC Bind 8.2.7 ISC Bind 8.3.0 ISC Bind 8.3.1 ISC Bind 8.3.2 ISC Bind 8.3.3 ISC Bind 8.3.4 ISC Bind 8.3.5 ISC Bind 8.3.6 ISC Bind 8.4 ISC Bind 8.4.1 ISC Bind 8.4.4 ISC Bind 8.4.5 ISC Bind 8.4.7 ISC Bind 9.0 ISC Bind 9.0.0 ISC Bind 9.0.1 ISC Bind 9.1 ISC Bind 9.1.0 ISC Bind 9.1.1 ISC Bind 9.1.2 ISC Bind 9.1.3 ISC Bind 9.2 ISC Bind 9.2.0 ISC Bind 9.2.1 ISC Bind 9.2.2 ISC Bind 9.2.3 ISC Bind 9.2.4 ISC Bind 9.2.5 ISC Bind 9.2.6 ISC Bind 9.2.7 ISC Bind 9.2.8 ISC Bind 9.2.9 ISC Bind 9.3 ISC Bind 9.3.0 ISC Bind 9.3.1 ISC Bind 9.3.2 ISC Bind 9.3.3 ISC Bind 9.3.4 ISC Bind 9.3.5 ISC Bind 9.3.6 ISC Bind 9.4 ISC Bind 9.4.0 ISC Bind 9.4.0A1 ISC Bind 9.4.0A2 ISC Bind 9.4.0A3 ISC Bind 9.4.0A4 ISC Bind 9.4.0A5 ISC Bind 9.4.0A6 ISC Bind 9.4.0B1 ISC Bind 9.4.0B2 ISC Bind 9.4.0B3 ISC Bind 9.4.0B4 ISC Bind 9.4.1 ISC Bind 9.4.2 ISC Bind 9.4.3 ISC Bind 9.4.3B1 ISC Bind 9.4.3B2 ISC Bind 9.4.3B3 ISC Bind 9.4.4 ISC Bind 9.5 ISC Bind 9.5.0 ISC Bind 9.5.0-P1 ISC Bind 9.5.0-P2 ISC Bind 9.5.0-P2-W1 ISC Bind 9.5.0-P2-W2 ISC Bind 9.5.0A1 ISC Bind 9.5.0A2 ISC Bind 9.5.0A3 ISC Bind 9.5.0A4 ISC Bind 9.5.0A5 ISC Bind 9.5.0A6 ISC Bind 9.5.0A7 ISC Bind 9.5.0B1 ISC Bind 9.5.0B2 ISC Bind 9.5.0B3 ISC Bind 9.5.1 ISC Bind 9.5.1B1 ISC Bind 9.5.1B2 ISC Bind 9.5.1B3 ISC Bind 9.5.2 ISC Bind 9.5.2-P1 ISC Bind 9.5.2-P2 ISC Bind 9.5.2-P3 ISC Bind 9.5.2-P4 ISC Bind 9.5.2B1 ISC Bind 9.5.3 ISC Bind 9.5.3B1 ISC Bind 9.6 ISC Bind 9.6-Esv ISC Bind 9.6-Esv-R1 ISC Bind 9.6-Esv-R2 ISC Bind 9.6-Esv-R3 ISC Bind 9.6-Esv-R4 ISC Bind 9.6-Esv-R4-P1 ISC Bind 9.6-Esv-R5 ISC Bind 9.6-Esv-R5B1 ISC Bind 9.6-Esv-R6 ISC Bind 9.6-Esv-R7 ISC Bind 9.6-Esv-R9 ISC Bind 9.6.0	752

Common Weakness Enumeration (CWE)

CWE-252 - Unchecked Return Value

Nessus

NASL family	Mandriva Local Security Checks
NASL id	MANDRIVA_MDVSA-2009-037.NASL
description	Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025. In this particular case the DSA_verify function was fixed with MDVSA-2009:002, this update does however address the RSA_verify function (CVE-2009-0265).
last seen	2020-06-01
modified	2020-06-02
plugin id	36346
published	2009-04-23
reporter	This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/36346
title	Mandriva Linux Security Advisory : bind (MDVSA-2009:037)

NASL family	Slackware Local Security Checks
NASL id	SLACKWARE_SSA_2009-014-02.NASL
description	New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue.
last seen	2020-06-01
modified	2020-06-02
plugin id	54870
published	2011-05-28
reporter	This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/54870
title	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 / current : bind (SSA:2009-014-02)

NASL family	F5 Networks Local Security Checks
NASL id	F5_BIGIP_SOL11503.NASL
description	The remote BIG-IP device is missing a patch required by a security advisory.
last seen	2020-06-01
modified	2020-06-02
plugin id	78125
published	2014-10-10
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/78125
title	F5 Networks BIG-IP : BIND 9 vulnerability (SOL11503)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-200903-14.NASL
description	The remote host is affected by the vulnerability described in GLSA-200903-14 (BIND: Incorrect signature verification) BIND does not properly check the return value from the OpenSSL functions to verify DSA (CVE-2009-0025) and RSA (CVE-2009-0265) certificates. Impact : A remote attacker could bypass validation of the certificate chain to spoof DNSSEC-authenticated records. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	35812
published	2009-03-10
reporter	This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/35812
title	GLSA-200903-14 : BIND: Incorrect signature verification

NASL family	F5 Networks Local Security Checks
NASL id	F5_BIGIP_SOL9754.NASL
description	The remote BIG-IP device is missing a patch required by a security advisory.
last seen	2020-06-01
modified	2020-06-02
plugin id	78228
published	2014-10-10
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/78228
title	F5 Networks BIG-IP : BIND 9 vulnerability (SOL9754)

Statements

contributor	Joshua Bressers
lastmodified	2009-01-26
organization	Red Hat
statement	Not vulnerable. This issue did not affect the versions of BIND as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

Statements

References