EUVD-2006-0534

Malware in sbrugna...

EUVD-2001-0011

Malware in sbrugna...

CVE-2002-2211: Undefined Security Weakness

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed responses, which increases the possibility of...

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

CVE-2006-0527: Undefined Security Weakness

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

CVE-2002-1146

The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...

CVE-2001-0012

CVE-2001-0012 concerns ISC BIND 4.x and 8.x where an information-leak vulnerability allows a remote attacker to access environment variables by sending a specially crafted query. The CERT/CC and Debian/Red Hat advisories document that this issue arises in BIND 4/8 and can lead to leakage of sensi...

CVE-2001-0013

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

CVE-2001-0012

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables...

CVE-2001-0011

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

EUVD-2001-0013

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

CVE-2001-0011

CVE-2001-0011 describes a buffer overflow in the nslookupComplain() routine of ISC BIND 4, enabling remote attackers to execute code with the BIND process’s privileges (typically root) and potentially gain full control of affected systems. Affected lines include BIND 4.x and certain 8.x versions ...

CVE-2001-0013

CVE-2001-0013 describes a format-string vulnerability in the nslookupComplain() routine of ISC BIND 4. This flaw allows remote attackers to execute code with the BIND process’ privileges (typically root) by sending specially crafted DNS input. The CERT/CC note (CA-2001-02) identifies vulnerable v...

CVE-2001-0012: Undefined Security Weakness

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables...

CVE-2001-0013

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

CVE-2001-0011

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

ISC BIND 4 contains input validation error in nslookupComplain()

Overview The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS by the Internet Software Consortium ISC. There is a format string vulnerability in BIND 4.9.4 that may allow remote intruders to gain access to systems running BIND. Although BIND 4.9.x is no longer...