CVE-2007-2925
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do...
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
Exploit likelihood
What each source reports
NVD Score used
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
CVE-2007-2925- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
CVE-2007-2925- Updated
- 2026-11-02
EUVDEUVD-2007-2917 No score
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
EUVD-2007-2917- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-439f-hv4q-rmc5 No score
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do...
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
GHSA-439f-hv4q-rmc5- Updated
- 2026-11-02
OSV No score
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
CVE-2007-2925- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2925 No score
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
- Record
DEBIAN-CVE-2007-2925- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10650-1 No score
bind-9.16.20-1.4 on GA media
These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10650-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2925 is a medium vulnerability (CVSS 5.8) in Isc Bind, published July 24, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.15%, the 93rd percentile. Fixed in bind9 1:9.4.1-P1-1.
References
securityfocus.com/bid/25076
vupen.com/english/advisories/2007/2914
securitytracker.com/id?1018441
secunia.com/advisories/26509
mandriva.com/security/advisories?name=MDKSA-2007:149
Show 44 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/35571
gentoo.org/security/en/glsa/glsa-200708-13.xml
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
isc.org/index.pl?/sw/bind/bind-security.php
openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
nvd.nist.gov/vuln/detail/CVE-2007-2925
github.com/advisories/GHSA-439f-hv4q-rmc5
security-tracker.debian.org/tracker/CVE-2007-2925
suse.com/security/cve/CVE-2006-4339