Hackers Beware

Bind 8.2 NXT Exploit

The early versions of BIND that introduced the NXT resource record extension improperly validated these records inputs. This bug permits a remote attacker to execute a buffer overflow to gain access to a target system at the same privilege level the named daemon is running at, for example, root.

Exploit Details

• Name: BIND 8.2 NXT remote buffer overflow exploit.

• CVE Number: CVE-1999-0833.

• CERT Advisories:

  • http://www.cert.org/advisories/CA-2000-03.html

  • http://www.cert.org/advisories/CA-99-14-bind.html

• Operating System: Systems running BIND 8.2, 8.2.1 with Linux, Solaris, FreeBSD, OpenBSD, and NetBSD UNIX operating systems. Prior versions of BIND, including 4.x, are not vulnerable to this particular exploit.

• Protocols/Services: ...