Fedora Update for unbound FEDORA-2011-7555

Check for the Version of unbound OpenVAS Vulnerability Test Fedora Update for unbound FEDORA-2011-7555 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 14 : unbound-1.4.8-2.fc14 (2011-7555)

Denial of Service fix: CVE-2011-1922. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Unbound DNS Resolver远程拒绝服务漏洞

BUGTRAQ ID: 47986 CVECAN ID: CVE-2011-1922 Unbound是开源的递归式DNS服务器软件。 Unbound DNS解析器在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成服务器崩溃，拒绝服务合法用户。 仅在Unbound用断言配置并开启选项interface-automatic时会触发此漏洞。 Unbound Unbound 1.4.9 Unbound Unbound 1.4.3 Unbound Unbound 1.4.2 Unbound Unbound 1.3.4 Unbound Unbound 1.3.3 厂商补丁： Unbound...

DEBIAN-CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

CVE-2011-1922 affects Unbound 1.x prior to 1.4.10 when debugging is enabled and interface-automatic is on. A remote attacker can trigger assertion failure and daemon exit via a crafted DNS request due to improper error handling, resulting in a denial of service. Remediation per advisories is to u...

Fedora 15 : unbound-1.4.8-5.fc15 (2011-7540)

Denial of Service fix: CVE-2011-1922 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

FreeBSD : Unbound -- an empty error packet handling assertion failure (dc96ac1f-86b1-11e0-9e85-00215af774f0)

Unbound developer reports : NLnet Labs was notified of an error in Unbound's code-path for error replies which is triggered under special conditions. The error causes the program to abort. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Unbound DNS resolver denial of service vulnerability

Overview A specially crafted DNS query may cause Unbound to respond with an empty UDP packet which triggers an assertion failure and stops the daemon. Description NLnetLabs advisory states:"Certain types of DNS queries may cause Unbound to respond with a DNS error message. The code generating thi...

Gentoo Security Advisory GLSA 201009-04 (SARG sarg)

The remote host is missing updates announced in advisory GLSA 201009-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 1922-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 1922-1. OpenVAS Vulnerability Test $Id: deb19221.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1922-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Firefox document.getSelect跨域信息泄露漏洞

BUGTRAQ ID: 36858 CVE ID: CVE-2009-3375 Firefox是一款流行的开源WEB浏览器。 Firefox的content/html/document/src/nsHTMLDocument.cpp允许远程攻击者通过document.getSelection函数绕过同源策略，读取其他域中的高亮显示的文本。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1922-1）以及相应补丁: DSA-1922-1：New xulrunner...

Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)

This host is missing a critical security update according to Microsoft Bulletin MS09-040. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1922

The CVE-2009-1922 entry concerns Microsoft Windows Message Queuing (MSMQ) Privilege Escalation affecting Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista. The root cause is improper validation of IOCTL request data in the MSMQ IOCTL handler (mqac.sys) as data moves from user mode to kernel mo...

[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability

---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...

Mandrake Security Advisory MDVSA-2009:073 (sarg)

The remote host is missing an update to sarg announced via advisory MDVSA-2009:073. OpenVAS Vulnerability Test $Id: mdksa2009073.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:073 sarg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:073 (sarg)

The remote host is missing an update to sarg announced via advisory MDVSA-2009:073. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD Ports: clamav

The remote host is missing an update to the system as announced in the referenced advisory. VID 6d18fe19-ee67-11d9-8310-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1922

CVE-2008-1922 concerns multiple stack-based buffer overflows in the Squid Analysis Report Generator (SARG). The issue could allow remote attackers to execute arbitrary code via unknown vectors, with a crafted Squid log file cited as a probable vector. Public advisories reference SARG fixes across...

CVE-2007-1922

CVE-2007-1922 affects AOL Nullsoft Winamp 5.33, specifically the IT and S3M modules in IN_MOD.DLL. A crafted .IT or .S3M file containing integer values used as memory offsets can trigger memory corruption, enabling remote attackers to execute arbitrary code. Risk assessment and exact exploitation...