CVE-2002-0400
CVE-2002-0400 is a medium-severity vulnerability in Isc Bind with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 14% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 14% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Isc Bind
- Published:
- Last modified:
Description
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
Frequently asked questions
- What is CVE-2002-0400?
- ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
- How severe is CVE-2002-0400?
- CVE-2002-0400 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2002-0400 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 14% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2002-0400?
- CVE-2002-0400 primarily affects Isc Bind. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2002-0400?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2002-0400 published?
- CVE-2002-0400 was published on 2002-06-18 and last updated on 2026-06-16.
References
- ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt
- http://archives.neohapsis.com/archives/hp/2002-q3/0022.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038
- http://www.cert.org/advisories/CA-2002-15.html
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- http://www.iss.net/security_center/static/9250.php
- http://www.kb.cert.org/vuls/id/739123
- http://www.novell.com/linux/security/advisories/2002_21_bind9.html
- http://www.redhat.com/support/errata/RHSA-2002-105.html
- http://www.redhat.com/support/errata/RHSA-2002-119.html
- http://www.redhat.com/support/errata/RHSA-2003-154.html
- http://www.securityfocus.com/bid/4936
Affected products (6)
- cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*
More vulnerabilities in Isc Bind
- CVE-2008-0122 — Critical (CVSS 10.0): Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2…
- CVE-2001-0011 — Critical (CVSS 10.0): Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
- CVE-2001-0013 — Critical (CVSS 10.0): Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
- CVE-2001-0010 — Critical (CVSS 10.0): Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
- CVE-2000-1029 — Critical (CVSS 10.0): Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR…
- CVE-1999-0837 — Critical (CVSS 10.0): Denial of service in BIND by improperly closing TCP sessions via so_linger.