unbound: bad cryptographic implementation
| Package(s): | unbound | CVE #(s): | CVE-2009-3602 | ||||||||
| Created: | December 28, 2009 | Updated: | February 23, 2010 | ||||||||
| Description: | From the Debian advisory: It was discovered that Unbound, a DNS resolver, does not properly check cryptographic signatures on NSEC3 records. As a result, zones signed with the NSEC3 variant of DNSSEC lose their cryptographic protection. (An attacker would still have to carry out an ordinary cache poisoning attack to add bad data to the cache.) | ||||||||||
| Alerts: |
| ||||||||||