CVE:CVE-2003-0914
CNNVD:CNNVD-200312-023
BIND 8是一款DNS协议实现，named(8)守护程序是Internet域名服务器。
BIND 8存在一个编程错误，远程攻击者可以利用这个漏洞对BIND服务进行拒绝服务攻击。
攻击者可以设置恶意DNS消息提送给目标域名服务器，可导致域名服务器为部分域名缓存一个否定的应答。要执行这个攻击，攻击者必须控制域名服务器，并且目标受害者BIND8查询这个域名服务器。攻击者可以设置一个高的TTL值来保持它的否定记录在目标域名服务器上的缓冲足够长，而这个时候依靠DNS的客户端应用程序将不能进行正常DNS响应。
solution:Upgrade isc bind to a higher version than 8.2.3,8.2.4,8.2.5,8.2.6,8.2.7,8.3.0,8.3.1,8.3.2,8.3.3,8.3.4,8.3.5,8.3.6,8.4,8.4.1,and avoid the version 8.2.3,8.2.4,8.2.5,8.2.6,8.2.7,8.3.0,8.3.1,8.3.2,8.3.3,8.3.4,8.3.5,8.3.6,8.4,8.4.1; Upgrade nixu namesurfer to a higher version than standard_3.0.1,suite_3.0.1,and avoid the version standard_3.0.1,suite_3.0.1; Upgrade compaq tru64 to a higher version than 4.0f,4.0f_pk6_bl17,4.0f_pk7_bl18,4.0f_pk8_bl22,4.0g,4.0g_pk3_bl17,4.0g_pk4_bl22,5.1,5.1_pk3_bl17,5.1_pk4_bl18,5.1_pk5_bl19,5.1_pk6_bl20,5.1a,5.1a_pk1_bl1,5.1a_pk2_bl2,5.1a_pk3_bl3,5.1a_pk4_bl21,5.1a_pk5_bl23,5.1b,5.1b_pk1_bl1,5.1b_pk2_bl22,and avoid the version 4.0f,4.0f_pk6_bl17,4.0f_pk7_bl18,4.0f_pk8_bl22,4.0g,4.0g_pk3_bl17,4.0g_pk4_bl22,5.1,5.1_pk3_bl17,5.1_pk4_bl18,5.1_pk5_bl19,5.1_pk6_bl20,5.1a,5.1a_pk1_bl1,5.1a_pk2_bl2,5.1a_pk3_bl3,5.1a_pk4_bl21,5.1a_pk5_bl23,5.1b,5.1b_pk1_bl1,5.1b_pk2_bl22; Upgrade freebsd freebsd to a higher version than 4.4,4.5,4.6,4.6.2,4.7,4.8,4.9,5.0,and avoid the version 4.4,4.5,4.6,4.6.2,4.7,4.8,4.9,5.0; Upgrade hp hp-ux to a higher version than 11.00,11.11,and avoid the version 11.00,11.11; Upgrade ibm aix to a higher version than 5.1l,and avoid the version 5.1l; Upgrade netbsd netbsd to a higher version than 1.6,1.6.1,current,and avoid the version 1.6,1.6.1,current; Upgrade sco unixware to a higher version than 7.1.1,and avoid the version 7.1.1; Upgrade sun solaris to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade sun sunos to a higher version than 5.7,5.8,and avoid the version 5.7,5.8