Summary
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:07.bind.asc
Solution
Upgrade your system to the appropriate stable release or security branch dated after the correction date
https://secure1.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-07:07.bind.asc
Insight
BIND 9 is an implementation of the Domain Name System (DNS) protocols.
The named(8) daemon is an Internet Domain Name Server. DNS requests contain a query id which is used match a DNS request with the response and to make it harder for anybody but the DNS server which received the request to send a valid response.
When named(8) is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named(8) uses a predictable query id.
Severity
Classification
-
CVE CVE-2007-2926 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities