CVE-2002-1219: Freebsd

High severity, CVSS 7.5. EPSS: 12.3% chance of exploitation in the next 30 days.

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).

Affected products

• Freebsd Freebsd: version 4.4 only; version 4.5 only; version 4.6 only; version 4.7 only
• ISC BIND: version 4.9.5 only; version 4.9.6 only; version 4.9.7 only; version 4.9.8 only; version 4.9.9 only; version 4.9.10 only; …
• OpenBSD OpenBSD: version 3.0 only; version 3.1 only; version 3.2 only

Published 2002-11-29. Last modified 2026-06-16.