CVE:CVE-1999-0009
CNNVD:CNNVD-199804-012
BIND是一套开源的用于实现DNS协议的软件。
低于4.9.7和8.1.2的BIND版本中在处理反向查询时存在一个严重的缓冲区溢出漏洞，远程攻击者可能利用此漏洞在主机上以root用户的权限执行任意指令。
当req_iquery()函数在处理一个反向域名解析请求时，如果用户提供超长的数据，将导致发生堆栈溢出，远程攻击者可能通过溢出攻击获取主机的root用户权限。这个漏洞影响所有使用有问题BIND版本的系统，而且已经有很多攻击程序流传开来。
<*链接：http://www.cert.org/advisories/CA-1998-05.html
        ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX
        ftp://patches.sgi.com/support/free/security/advisories/19980603-02-PX
        ftp://ftp.auscert.org.au/pub/auscert/ESB/ESB-98.137
        http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180&type=0&nav=sec.sba
*>
solution:Upgrade data_general dg_ux to a higher version than 5.4_3.0,5.4_3.1,5.4_4.1,5.4_4.11,and avoid the version 5.4_3.0,5.4_3.1,5.4_4.1,5.4_4.11; Upgrade isc bind to a higher version than 4.9.6,8.1,8.1.1,and avoid the version 4.9.6,8.1,8.1.1; Upgrade sgi irix to a higher version than 3.2,3.3,3.3.1,3.3.2,3.3.3,4.0,4.0.1,4.0.1t,4.0.2,4.0.3,4.0.4,4.0.4b,4.0.4t,4.0.5,4.0.5_iop,4.0.5_ipr,4.0.5a,4.0.5d,4.0.5e,4.0.5f,4.0.5g,4.0.5h,5.0,5.0.1,5.1,5.1.1,5.2,5.3,6.0,6.1,6.2,6.3,and avoid the version 3.2,3.3,3.3.1,3.3.2,3.3.3,4.0,4.0.1,4.0.1t,4.0.2,4.0.3,4.0.4,4.0.4b,4.0.4t,4.0.5,4.0.5_iop,4.0.5_ipr,4.0.5a,4.0.5d,4.0.5e,4.0.5f,4.0.5g,4.0.5h,5.0,5.0.1,5.1,5.1.1,5.2,5.3,6.0,6.1,6.2,6.3; Upgrade bsdi bsd_os to a higher version than 2.0,2.0.1,2.1,and avoid the version 2.0,2.0.1,2.1; Upgrade caldera openlinux to a higher version than 1.0,and avoid the version 1.0; Upgrade ibm aix to a higher version than 4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.2,4.2.1,4.3,and avoid the version 4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.2,4.2.1,4.3; Upgrade nec asl_ux_4800 to a higher version than 64,and avoid the version 64; Upgrade netbsd netbsd to a higher version than 1.0,1.1,1.2,1.2.1,1.3,1.3.1,and avoid the version 1.0,1.1,1.2,1.2.1,1.3,1.3.1; Upgrade redhat linux to a higher version than 4.0,4.1,4.2,5.0,and avoid the version 4.0,4.1,4.2,5.0; Upgrade sco open_desktop to a higher version than 3.0,5.0,and avoid the version 3.0,5.0; Upgrade sco unixware to a higher version than 2.1,7.0,and avoid the version 2.1,7.0; Upgrade sun solaris to a higher version than 2.5,2.5.1,2.6,and avoid the version 2.5,2.5.1,2.6; Upgrade sun sunos to a higher version than -,5.3,5.4,5.5,5.5.1,and avoid the version 5.3,5.4,5.5,5.5.1