Mandriva Linux Security Advisory : bind (MDVSA-2008:139)

A weakness was found in the DNS protocol by Dan Kaminsky. A remote attacker could exploit this weakness to spoof DNS entries and poison DNS caches. This could be used to misdirect users and services; i.e. for web and email traffic CVE-2008-1447. This update provides the latest stable BIND release...

CVE-2009-1447

creationtimestamp| type| source ---|---|--- 2009-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8474...

Mandriva Update for bind MDVSA-2008:139 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVSA-2008:139 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for bind RHSA-2008:0533-01

Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2008:0533-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for bind CESA-2008:0533-03 centos2 i386

Check for the Version of bind OpenVAS Vulnerability Test CentOS Update for bind CESA-2008:0533-03 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for bind CESA-2008:0533 centos4 x86_64

Check for the Version of bind OpenVAS Vulnerability Test CentOS Update for bind CESA-2008:0533 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for bind CESA-2008:0533-03 centos2 i386

Check for the Version of bind OpenVAS Vulnerability Test CentOS Update for bind CESA-2008:0533-03 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Core 9 FEDORA-2009-1069 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory FEDORA-2009-1069. OpenVAS Vulnerability Test $Id: fcore20091069.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1069 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-1069 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory FEDORA-2009-1069. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Update for ruby FEDORA-2008-8736

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bind FEDORA-2008-6256

Check for the Version of bind OpenVAS Vulnerability Test Fedora Update for bind FEDORA-2008-6256 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for ruby FEDORA-2008-8736

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2008-8736 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for ruby FEDORA-2008-8738

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2008-8738 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 9 : dnsmasq-2.45-1.fc9 (2009-1069)

Update to newer upstream version - 2.45. Version of dnsmasq previously shipped in Fedora 9 did not properly drop privileges, causing it to run as root instead of intended user nobody. Issue was caused by a bug in kernel-headers used in build environment of the original packages. 454415 New upstre...

Gentoo Security Advisory GLSA 200901-03 (pdnsd)

The remote host is missing updates announced in advisory GLSA 200901-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

pdnsd: Denial of Service and cache poisoning

Background pdnsd is a proxy DNS server with permanent caching that is designed to cope with unreachable DNS servers. Description Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to...

[slackware-security] ruby

New ruby packages are available for Slackware 11.0, 12.0, and 12.1 to fix bugs and a security issue. More details about the issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1447 Here are the details from the Slackware 12.1 ChangeLog:...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

dns-random-srcport NSE Script

Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see . Be aware that any targets against which this script is run will be...