Patchwire CVEs, their patch status, and feeds to follow them

CVE-2003-0914

Fixed in a distro release EPSS 4%

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Published 2003-12-02 · CVE record · OSV

Products: isc bind, nixu namesurfer, compaq tru64, freebsd, hp-ux, ibm aix, netbsd, sco unixware, sun solaris, sunos

Distro releases

ReleasePackageFixed in
Debian 3.0bind1:8.3.3-2.0woody2