CVE-2003-0914: Compaq TRU64

Medium severity, CVSS 4.3. EPSS: 3.8% chance of exploitation in the next 30 days.

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Affected products

• Compaq TRU64: version 4.0f only; version 4.0f_pk6_bl17 only; version 4.0f_pk7_bl18 only; version 4.0f_pk8_bl22 only; version 4.0g only; version 4.0g_pk3_bl17 only; …
• Freebsd Freebsd: version 4.4 only; version 4.5 only; version 4.6 only; version 4.6.2 only; version 4.7 only; version 4.8 only; …
• HP HP-Ux: version 11.00 only; version 11.11 only
• IBM Aix: version 5.1l only
• ISC BIND: version 8.2.3 only; version 8.2.4 only; version 8.2.5 only; version 8.2.6 only; version 8.2.7 only; version 8.3.0 only; …
• Netbsd Netbsd: version 1.6 only; version 1.6.1 only; version current only
• Nixu Namesurfer: version standard_3.0.1 only; version suite_3.0.1 only
• Sco Unixware: version 7.1.1 only
• Sun Solaris: version 7.0 only; version 8.0 only; version 9.0 only
• Sun Sunos: version 5.7 only; version 5.8 only

Published 2003-12-15. Last modified 2026-06-16.