RHEL 5 / 6 / 7 : bind (RHSA-2014:1984)

"Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ISC BIND 9 Multiple DoS Vulnerabilities

According to its self-reported version number, the remote installation of BIND is affected by multiple denial of service vulnerabilities : - A flaw exists within the Domain Name Service due to an error in the code used to follow delegations. A remote attacker, with a maliciously-constructed zone ...

bind97 security update

32:9.7.0-21.P2.1 - Fix CVE-2014-8500 1171972...

bind security update

32:9.9.4-14.0.1.el70.1 - Rebuild to fix libmysqlclient dependency 32:9.9.4-14.1 - Fix CVE-2014-8500 1171975...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.6P1-i486-1slack14.1.txz: Upgraded. This update fixes a security issue where a failure to place limits...

CVE-2014-8500

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service memory consumption and named crash via a large or infinite number of referrals...

CVE-2014-8500

CVE-2014-8500 affects ISC BIND 9.0.x–9.8.x, 9.9.0–9.9.6, and 9.10.0–9.10.1, where delegation chaining is not limited, enabling remote attackers to cause memory exhaustion or a named crash via a large or infinite number of referrals. Impact: denial of service; all recursive resolvers are affected,...

MGASA-2014-0524 Updated bind packages fix CVE-2014-8500

Updated bind packages fix security vulnerability: By making use of maliciously-constructed zones or a rogue server, an attacker can exploit an oversight in the code BIND 9 uses to follow delegations in the Domain Name Service, causing BIND to issue unlimited queries in an attempt to follow the...

Updated bind packages fix CVE-2014-8500

Updated bind packages fix security vulnerability: By making use of maliciously-constructed zones or a rogue server, an attacker can exploit an oversight in the code BIND 9 uses to follow delegations in the Domain Name Service, causing BIND to issue unlimited queries in an attempt to follow the...

CVE-2014-8500

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service memory consumption and named crash via a large or infinite number of referrals...

[SECURITY] [DSA 3094-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3094-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 08, 2014 http://www.debian.org/security/faq -...

PLANSHIP Cloud Service Detection

Binary data 8500.prm...

HP OfficeJet Pro 8500 XSS

According to its self-reported build information, the firmware running on the remote HP OfficeJet printer is affected by a cross-site scripting vulnerability that could allow an attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user...

ZOHO ManageEngine OpStor多个跨站脚本漏洞

CVE ID:CVE-2014-2670 Zoho ManageEngine OpStor是一个存储设备监控解决方案,帮助企业有效监控存储资源。 允许通过验证的攻击者注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 ZOHO ManageEngine OpStor ManageEngine Build 8500版本已修复该漏洞，建议用户下载使用： http://www.manageengine.com/products/opstor/...

ManageEngine OpStor跨站脚本和特权提升漏洞

Bugtraq ID:66499 CVE ID:CVE-2014-0344 ManageEngine OpStor是一个存储设备监控解决方案,帮助企业有效监控存储资源。 ManageEngine OpStor存在多个安全楼的那个： 1，ManageEngine OpStor不正确校验低权限用户对'Properties.do?name='模块的访问，允许低权限用户修改隐藏‘edit’布尔参数为'true'，提升为管理员权限。 2，ManageEngine OpStor不正确过滤用户提交的参数，允许攻击者利用漏洞进行跨站脚本攻击。 0 ManageEngine OpStor Build 83...

HP Officejet Pro 8500 crossite scripting

Crossite scripting in web interface...

Cross site scripting

Cross-site scripting XSS vulnerability on HP Officejet Pro 8500 aka A909 All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4845

The CVE-2013-4845 issue affects HP Officejet Pro 8500 (A909) All-in-One Printer web interface, where a cross-site scripting (XSS) vulnerability could allow an attacker to inject arbitrary script via unspecified vectors. Affected firmware/web context is the printer’s web UI; exposed impact is user...

HPSBPI02945 rev.2 - HP Officejet Pro 8500 (A909) All-in-One Printer, Cross-Site Scripting (XSS)

Potential Security Impact Cross-site scripting XSS VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Officejet Pro 8500 A909 All-in-One Printer. The vulnerability could be exploited to allow cross-site scripting XSS. RESOLUTION HP has provided updated HP Officej...

SuSE 11.2 / 11.3 Security Update : libxslt (SAT Patch Numbers 8500 / 8501)

libxslt received a security update to fix a security issue : - The XSL implementation in libxslt allowed remote attackers to cause a denial of service crash via an invalid DTD. addendum due to incomplete fix for CVE-2012-2825. CVE-2013-4520 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...