nxt bug

Summary:

Buffer overflow in BIND 8.2 via NXT records.

CVE:

CVE-1999-0833

Posting date:

08 Nov 1999

Program Impacted:

BIND

Versions affected:

8.2, 8.2.1

Severity:

Critical

Exploitable:

Remotely

Description:

A bug in the processing of NXT records can theoretically allow an attacker to gain access to the system running the DNS server with the same privileges that the BIND process has.

Workarounds:

None.

Active exploits:

Scripts are available to implement this attack.

Solution:

Upgrade to 8.2.2 or newer