Important: bind

Issue Overview: A flaw was found in the DNS64 implementation in BIND. If a remote attacker sent a specially-crafted query to a named server, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by default. CVE-2012-5688 Affected Packages: bind Issue...

RHEL 6 : bind (RHSA-2012:1549)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1549 advisory. - bind: DoS on servers using DNS64 CVE-2012-5688 Note that Nessus has not tested for this issue but has instead relied only on the application's...

bind security update

CentOS Errata and Security Advisory CESA-2012:1549 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base scor...

CVE-2012-5688

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...

CVE-2012-5688

CVE-2012-5688 affects ISC BIND 9.8.x (before 9.8.4-P1) and 9.9.x (before 9.9.2-P1) when DNS64 is enabled. A crafted DNS query can trigger an assertion failure in named(8), causing a denial of service. The issue is mitigated by not enabling DNS64 or by upgrading to patched releases (9.8.4-P1, 9.9....

bind security update

32:9.8.2-0.10.rc1.6 - fix CVE-2012-5688...

Mandriva Linux Security Advisory : bind (MDVSA-2012:177)

A vulnerability was discovered and corrected in bind : BIND 9 nameservers using the DNS64 IPv6 transition mechanism are vulnerable to a software defect that allows a crafted query to crash the server with a REQUIRE assertion failure. Remote exploitation of this defect can be achieved without...

Mandriva Update for bind MDVSA-2012:177 (bind)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ISC BIND 9 DNS64 Handling DoS

According to its self-reported version number, the remote installation of BIND can be forced to crash via maliciously crafted DNS requests. Note that this vulnerability only affects installs using the 'dns64' configuration option. Further note that Nessus has only relied on the version itself and...

Six Security Flaws Fixed in BIND 9.9.2

A new version of the BIND DNS server software is available, fixing six security vulnerabilities and a long list of other bugs. BIND 9.9.2-P1 is mainly a security update and most of the issues it fixes are crashes and not remote code execution flaws. BIND is the overwhelming leader in market share...

Fedora Core 10 FEDORA-2009-7750 (mediawiki)

The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-7750. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

MediaWiki 1.8.1 - 1.13.3 Information Disclosure Vulnerabilities

MediaWiki is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 8 : mediawiki-1.13.3-41.99.fc8 (2008-11688)

This is a security release of MediaWiki 1.13.3. Some of the security issues affect all versions of MediaWiki except the versions released on Dec. 15th, so all site administrators are encouraged to upgrade. CVEs assigned to the mentioned MediaWiki update: CVE-2008-5249 Cross-site scripting XSS...

CVE-2008-5688

CVE-2008-5688 affects MediaWiki 1.8.1 through 1.13.3 (and variants) where, if wgShowExceptionDetails is enabled, an uncaught exception can reveal the full installation path in a debugging message. This may allow remote attackers to obtain sensitive information via unspecified requests triggering ...

CVE-2007-5688

CVE-2007-5688: Multiple SQL injection vulnerabilities in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3 for phpBB/IPB, in directory.php, allow remote attackers to execute arbitrary SQL via the (1) go and (2) cat parameters. Affected software is the Multi-Forums module version 1.3.3; roo...