[SECURITY] [DSA 2656-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2656-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 30, 2013 http://www.debian.org/security/faq -...

ISC BIND 9 libdns Regular Expression Handling DoS

According to its self-reported version number, the remote installation of BIND can be forced to crash via memory exhaustion caused by specially crafted regular expressions. Note this vulnerability only affects Unix and Unix-like systems when the application has been compiled to include regular...

RHEL 5 : bind97 (RHSA-2013:0690)

"Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 5 : bind97 (CESA-2013:0690)

"Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ISC BIND 9 'libdns' 远程拒绝服务漏洞(CVE-2013-2266)

Bugtraq ID:58736 CVE ID:CVE-2013-2266 ISC BIND是一款DNS协议的实现 ISC BIND存在一个安全漏洞，允许远程攻击者利用漏洞发送特制的请求，使目标named服务在处理规则表达式时消耗大量内存，造成系统崩溃。 BIND 9.6.x和10.x不受此漏洞影响。此外此漏洞仅影响unix及相关的操作系统，基于windows的版本不受此漏洞影响。 0 ISC BIND 9.7.x, 9.8.0 - 9.8.5b1, 9.9.0 - 9.9.3b1 厂商解决方案 ISC BIND 9.8.4-P2, 9.9.2-P及更改版本已经修复此漏洞，建议用户下载更...

Important: Red Hat Security Advisory: bind97 security update

Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2013-2266

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service memory consumption via a crafted regular expression, as demonstrated by a memory-exhaustion attack again...

Design/Logic Flaw

libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service memory consumption via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266...

CVE-2013-2266

CVE-2013-2266 affects ISC BIND’s libdns, allowing remote attackers to trigger a denial of service by sending a crafted regular expression that drives memory usage. Affected are BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2. Several ven...

bind97 security update

32:9.7.0-17.P2.1 - fix CVE-2013-2266...

Debian DSA-2266-1 : php5 - several vulnerabilities

Several vulnerabilities were discovered in PHP, which could lead to denial of service or potentially the execution of arbitrary code. - CVE-2010-2531 An information leak was found in the varexport function. - CVE-2011-0421 The Zip module could crash. - CVE-2011-0708 An integer overflow was...

Fedora Update for kernel FEDORA-2010-13903

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-13903 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Vulnerabilities with invalid UTF-8 sequence on Windows

Vulnerabilities with invalid UTF-8 sequence on Windows Severity: major CVE-2010-2266 Not vulnerable: 0.8.41+, 0.7.67+ Vulnerable: nginx/Windows 0.7.52-0.8.40...

CVE-2010-2266

Technical details about CVE-2010-2266 are not publicly provided in the connected documents. The available sources only reiterate the initial description; no affected versions, root cause, impact, or remediation are present.

CVE-2010-2266

creationtimestamp| type| source ---|---|--- 2010-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13818...

CVE-2009-2266

OXID eShop (Community/CE) 4.x up to 4.1.3 and earlier 3.x/2.x is affected by CVE-2009-2266: a crafted cookie can disclose sensitive information—session details and other users’ order history. Root cause is an information-disclosure flaw via cookie handling. Impact is partial confidentiality loss ...

Gentoo Security Advisory GLSA 200507-24 (mozilla)

The remote host is missing updates announced in advisory GLSA 200507-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200808-11 (nzbget uudeview)

The remote host is missing updates announced in advisory GLSA 200808-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[ GLSA 200808-11 ] UUDeview: Insecure temporary file creation

Gentoo Linux Security Advisory GLSA 200808-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-2266

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...