CVE-2013-6230 Security feature bypass in n/a
Remote attackers can bypass IP address restrictions in ISC BIND on Windows Server by exploiting a Winsock netmask misinterpretation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6230?
CVE-2013-6230 is a medium-severity vulnerability in Isc Bind, published on 8 Nov 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask.
Weakness: CWE-264
Which versions are affected by CVE-2013-6230?
It affects 1 product.
Products include Isc Bind.
How do I fix CVE-2013-6230?
No fix has been published for CVE-2013-6230 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6230 being exploited?
There is no known exploitation of CVE-2013-6230 in the wild and no public exploit code.
Other vulnerabilities in Isc Bind
Sources
Also known as GHSA-v9c9-f7pq-rcx4.