Skip to main content

ISC BIND Tampering Vulnerability

Last Update Date: 20 Sep 2018 10:20 Release Date: 20 Sep 2018 4672 Views

RISK: Medium Risk

TYPE: Servers - Network Management

TYPE: Network Management

A vulnerability was identified in ISC BIND, a remote authenticated user can exploit this vulnerability to trigger tampering on the targeted system.


Impact

  • Data Manipulation

System / Technologies affected

  • BIND 9 (contain the krb5-subdomain and ms-subdomain update policies)

Solutions

No patch is currently available, please refer to the link below for workaround:

 

https://kb.isc.org/docs/cve-2018-5741

 

 


Vulnerability Identifier


Source


Related Link