Signature Verification Flaw in Unbound DNS Resolver by NLnet Labs
CVE-2009-3602

Currently unrated

Key Information:

Vendor

Nlnetlabs

Status
Unbound
Vendor
CVE Published:
13 October 2009

What is CVE-2009-3602?

The Unbound DNS resolver, prior to version 1.3.4, contains a vulnerability in its handling of NSEC3 record signature verification. This weakness can be exploited by remote attackers using crafted DNS delegation responses to downgrade secure delegations through DNS spoofing or other DNS-related attacks. This flaw compromises the integrity of DNS lookups, potentially redirecting users to malicious sites.

References

http://secunia.com/advisories/37913
third-party-advisoryx_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2009/10/09/3
mailing-listx_refsource_MLIST
http://secunia.com/advisories/36996
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.