Test ID:	1.3.6.1.4.1.25623.1.0.66459
Category:	SuSE Local Security Checks
Title:	SuSE Security Advisory SUSE-SA:2009:059 (bind)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory SUSE-SA:2009:059. The bind DNS server was updated to close a possible cache poisoning vulnerability which allowed to bypass DNSSEC. This problem can only happen after the other spoofing/poisoning mechanisms have been bypassed already (the port and transaction id randomization). Also this can only happen if the server is setup for DNSSEC. Due to this limitation we consider this a minor issue. The DNSSEC implementation was redone in 2004 and implemented in bind 9.6. Earlier bind version do not support the DNSSEC version and so are not affected. This means that the Bind versions of SUSE Linux Enterprise Server 9 (bind 9.3.4) and SUSE Linux Enterprise Server 10 (bind 9.3.4) are not affected by this problem. Solution: Update your system with the packages as indicated in the referenced security advisory. https://secure1.securityspace.com/smysecure/catid.html?in=SUSE-SA:2009:059 CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4022 AIX APAR: IZ68597 http://www.ibm.com/support/docview.wss?uid=isg1IZ68597 AIX APAR: IZ71667 http://www.ibm.com/support/docview.wss?uid=isg1IZ71667 AIX APAR: IZ71774 http://www.ibm.com/support/docview.wss?uid=isg1IZ71774 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html BugTraq ID: 37118 http://www.securityfocus.com/bid/37118 CERT/CC vulnerability note: VU#418861 http://www.kb.cert.org/vuls/id/418861 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:304 http://www.openwall.com/lists/oss-security/2009/11/24/2 http://www.openwall.com/lists/oss-security/2009/11/24/8 http://www.openwall.com/lists/oss-security/2009/11/24/1 http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://osvdb.org/60493 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459 http://www.redhat.com/support/errata/RHSA-2009-1620.html http://secunia.com/advisories/37426 http://secunia.com/advisories/37491 http://secunia.com/advisories/38219 http://secunia.com/advisories/38240 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 http://secunia.com/advisories/39334 http://secunia.com/advisories/40730 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1 http://www.ubuntu.com/usn/USN-888-1 http://www.vupen.com/english/advisories/2009/3335 http://www.vupen.com/english/advisories/2010/0176 http://www.vupen.com/english/advisories/2010/0528 http://www.vupen.com/english/advisories/2010/0622 XForce ISS Database: bind-dnssec-cache-poisoning(54416) https://exchange.xforce.ibmcloud.com/vulnerabilities/54416
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.