245 matches found
bind security update
CentOS Errata and Security Advisory CESA-2008:0533-03 Updated bind packages that help mitigate DNS spoofing attacks are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 10th July 2008 We have updated the Enterprise Linux ...
Multiple Vendor DNS Query ID Field Prediction Cache Poisoning
The remote DNS resolver does not use random ports when making queries to third-party DNS servers. An unauthenticated, remote attacker can exploit this to poison the remote DNS server, allowing the attacker to divert legitimate traffic to arbitrary sites. C Tenable Network Security, Inc...
CVE-2008-1447
The DNS protocol, as implemented in 1 BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; 2 Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referral...
[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...
bind security update
bind: 9.3.4-6.0.1.P1 - CVE-2008-1447 selinux-policy: 2.4.6-137.1 - Allow named to bind to any udp port Resolves: 451971...
Check Point response to DNS poisoning vulnerability CVE-2008-1447
...
Security fix for the ALT Linux 5 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
Security fix for the ALT Linux 8 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
ruby -- DNS spoofing vulnerability in resolv.rb
resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than...
Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...
Solaris 9 (x86) : 114265-23
SunOS 5.9x86: in.dhcpd libresolv and BIND. Date this patch was last updated by Sun : Jul/21/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
KLA10093 Multiple vulnerabilities in CA software
Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...
CA BrightStor ARCserver Tape Engine memory corruption vulnerability
Overview The Computer Associates BrightStor ARCserve Backup Tape Engine contains a memory corruption vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description BrightStor ARCserve Backup is a...
CVE-2007-1447
CVE-2007-1447 affects CA BrightStor ARCserve Backup Tape Engine (versions 11.5 and earlier). The vulnerability arises from memory corruption caused by improper data validation when processing RPC or stub data in the Tape Engine, enabling a remote attacker to cause DoS or potentially execute arbit...
CVE-2006-1447
CVE-2006-1447 affects Apple Mac OS X 10.4.6 LaunchServices. The issue lets remote attackers cause Safari to launch unsafe content by exploiting long file name extensions, which prevents Download Validation from determining which application will be used. The provided documents do not include a co...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
CVE-2001-1447
CVE-2001-1447 involves NetInfo Manager on Mac OS X 10.0–10.1. The vulnerability allows a local user to obtain root privileges by launching applications through the (1) recent items and (2) services menus, which causes those applications to run with root privileges. The provided documents do not i...
CVE-2004-1447
Jetbox One 2.0.8 (and possibly other versions) stores passwords in the database in plaintext, exposing user credentials. Root cause: plaintext credential storage in the data store, enabling potential disclosure if the database is accessed. CVE-2004-1447 is described with a Medium base score (AV:N...
