CVE-2003-0914
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache...
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Exploit likelihood
What each source reports
NVD Score used
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
- Record
CVE-2003-0914- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
- Record
CVE-2003-0914- Updated
- 2026-11-02
EUVDEUVD-2003-0904 No score
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
- Record
EUVD-2003-0904- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqcx-7w82-wcv3 No score
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache...
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
- Record
GHSA-gqcx-7w82-wcv3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bindDebian:3.0 |
before 1:8.3.3-2.0woody2 | 1:8.3.3-2.0woody2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0914 is a medium vulnerability (CVSS 4.3) in Isc Bind, published December 2, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.78%, the 89th percentile. Fixed in bind 1:8.3.3-2.0woody2.
References
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434
trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt
kb.cert.org/vuls/id/734644
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011
debian.org/security/2004/dsa-409
secunia.com/advisories/10542
nvd.nist.gov/vuln/detail/CVE-2003-0914
github.com/advisories/GHSA-gqcx-7w82-wcv3