CVE:CVE-2002-0684
CNNVD:CNNVD-200208-237
BIND 4.9.8版本和传输到glibc 2.2.5及其早期版本的执行查找网络名和地址的DNS分解器函数存在缓冲区溢出漏洞。远程恶意DNS服务器通过在如getnetbyname和getnetbyaddr函数之前使用子程序执行任意代码。
solution:Upgrade gnu glibc to a higher version than 2.2.5,and avoid the version (,2.2.5]; Upgrade isc bind to a higher version than 4.9.8,and avoid the version 4.9.8