bind security update

32:9.8.2-0.10.rc1.5 - fix CVE-2012-5166...

bind97 security update

32:9.7.0-10.P2.4 - fix CVE-2012-5166...

FreeBSD : dns/bind9* -- crash on deliberately constructed combination of records (57a700f9-12c0-11e2-9f86-001d923933b6)

ISC reports : A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

CVE-2012-5166

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service named daemon hang via unspecified combinations of resource records...

CVE-2012-5166

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service named daemon hang via unspecified combinations of resource records...

CVE-2012-5166

Summary (CVE-2012-5166) The BIND DNS server (named) is vulnerable to a remote DoS when specific combinations of RDATA are loaded in a query target, causing the server to lock up or crash. In affected environments using BIG-IP/F5 implementations, multiple product lines list vulnerable BIND compone...

CVE-2012-5166

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service named daemon hang via unspecified combinations of resource records...

CVE-2011-5166

CVE-2011-5166 affects KnFTP/KnFTPd 1.0.0. It describes multiple stack-based buffer overflows triggered by abnormally long strings passed to a wide range of FTP commands (USER, PASS, REIN, QUIT, PORT, PASV, TYPE, STRU, MODE, RETR, STOR, APPE, ALLO, REST, RNFR, RNTO, ABOR, DELE, CWD, LIST, NLST, SI...

CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...

CVE-2010-5166

CVE-2010-5166 describes a race condition in McAfee Total Protection 2010 10.0.580 on Windows XP that allows local users to bypass kernel-mode hook handlers by making specific user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component appears to be k...

SuSE 11.1 Security Update : librsvg (SAT Patch Number 5166)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code. CVE-2011-3146 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...

CVE-2008-5166

CVE-2008-5166 is described across sources as a SQL injection vulnerability in the Riddles Website 1.2.1, exploitable via the riddleid parameter to run arbitrary SQL commands. The affected component is riddle.php; impact is remote code/data access with partial confidentiality/integrity/availabilit...

CVE-2008-5166

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter...

CVE-2008-5166

creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5946...

CVE-2007-5166

CVE-2007-5166 affects SiteSys 1.0a with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL to the doc_root parameter for inc/pagehead.inc.php or inc/pageinit.inc.php. Root cause: unsanitized doc_root parameter ...