CVE-2003-0914
Fixed in a distro release EPSS 4%
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Products: isc bind, nixu namesurfer, compaq tru64, freebsd, hp-ux, ibm aix, netbsd, sco unixware, sun solaris, sunos
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | bind | 1:8.3.3-2.0woody2 |