Windows vulnerability in DNS Client Could Allow Spoofing (945553)

The remote host is probably affected by the vulnerability described in CVE-2008-0087 OpenVAS Vulnerability Test $Id: winCVE-2008-0087.nasl 5661 2017-03-21 11:39:13Z cfi $ Description: Windows vulnerability in DNS Client Could Allow Spoofing 945553 Authors: Carsten Koch-Mauthe Modified to Implemen...

CVE-2008-0087

CVE-2008-0087 describes a DNS spoofing vulnerability in the Windows DNS client. The issue stems from insufficient randomness in DNS transaction IDs, allowing remote attackers to spoof responses for vulnerable Windows clients (Windows 2000 SP4, XP SP2, Server 2003 SP1/SP2, and Vista). The OpenVAS ...

Solaris 9 (sparc) : 126105-42

Sun Cluster 3.2: CORE patch for Solaris 9. Date this patch was last updated by Sun : Apr/27/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2007-0087

Microsoft Internet Information Services IIS, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service network bandwidth consumption via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue...

CVE-2007-0087

CVE-2007-0087 involves Microsoft Internet Information Services (IIS). The vulnerability occurs when IIS processes a TCP connection with a large window size and a Range header that specifies multiple copies of the same fragment, enabling remote attackers to cause a denial of service through networ...

CVE-2006-0087

CVE-2006-0087 affects Lizard Cart CMS 1.04. The vulnerability is in (1) pages.php and (2) detail.php, where the id parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD data lists a base score of 7.5 (HIGH) with network access, low attack c...

RHEL 4 : alsa-lib (RHSA-2005:033)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:033 advisory. The alsa-lib package provides a library of functions for communication with kernel sound drivers. A flaw in the alsa mixer code was discovered that...

Important: Red Hat Security Advisory: alsa-lib security update

An updated alsa-lib package that fixes a flaw that disabled stack execution protection is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The alsa-lib package provides a library of functions for...

CVE-2005-0087

The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...

CVE-2003-0087

Buffer overflow in libIM library libIM.a for National Language Support NLS on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm...

CVE-2003-0087

CVE-2003-0087 describes a buffer overflow in the IBM AIX libIM.a (NLS) library. The vulnerability affects AIX 4.3.x through 5.2 and can allow a local attacker to gain privileges via multiple vectors, including a long -im argument to aixterm. The root cause is a buffer overflow in the libIM librar...

CVE-2004-0087

The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...

CVE-2004-0087

The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...

CVE-2003-0087

Buffer overflow in libIM library libIM.a for National Language Support NLS on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm...

CVE-2000-0087

CVE-2000-0087 affects Netscape Communicator’s Mail Notification (nsnotify) utility. The issue arises from using IMAP without SSL even when the user configures SSL for Communicator, enabling a remote attacker to sniff usernames and passwords in plaintext. The description documents the vulnerable c...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0087

CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2001-0087

itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program...

CVE-2001-0087

CVE-2001-0087 affects itetris/xitetris 1.6.2 and earlier. The vulnerability arises because the program trusts the PATH environment variable to locate and execute the gunzip program, enabling local users to gain root privileges by arranging PATH to point to a crafted, malicious gunzip. The connect...