Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*

part: a version: 4.9 update: *

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769354
pkg:gitlab/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769355

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-2213 vulnerable 2026-06-03 14:26:23.482355 Details available
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-09-16T21:08:51.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2212 vulnerable 2026-06-03 14:26:23.471914 Details available
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-09-16T23:42:25.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2211 vulnerable 2026-06-03 14:26:23.456583 Details available
BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-08-08T03:51:17.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1499 vulnerable 2026-06-03 14:25:42.377059 Details available
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
Published: 2001-09-12T04:00:00.000Z
Updated: 2024-08-01T17:18:07.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0011 vulnerable 2026-06-03 14:25:40.737855 Details available
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
Published: 1999-09-29T04:00:00.000Z
Updated: 2025-04-09T18:29:26.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0010 vulnerable 2026-06-03 14:25:40.733358 Details available
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
Published: 1999-09-29T04:00:00.000Z
Updated: 2024-08-01T16:27:56.711Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.