CVE-2013-5661 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
isc	bind	9.8.0 ≤ 𝑥 ≤ 9.9.0
nlnetlabs	nsd	3.2.15
nic	knot_resolver	𝑥 < 1.3.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

bind9

lucid	ignored
precise	ignored
quantal	ignored
raring	ignored
saucy	ignored

Common Weakness Enumeration

CWE-290 - Authentication Bypass by Spoofing
This attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5661

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-5661

https://security-tracker.debian.org/tracker/CVE-2013-5661

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5661

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-5661

https://security-tracker.debian.org/tracker/CVE-2013-5661