dns-nsid NSE Script

Retrieves information from a DNS nameserver by requesting its nameserver ID nsid and asking for its id.server and version.bind values. This script performs the same queries as the following two dig commands: - dig CH TXT bind.version @target - dig +nsid CH TXT id.server @target References: 1 2...

Security fix for the ALT Linux 7 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

DEBIAN-CVE-2011-0414

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...

Security fix for the ALT Linux 7 package bind version 9.3.6-alt5

July 28, 2009 Dmitry V. Levin 9.3.6-alt5 - Backported upstream fix for a remote DoS bug CVE-2009-0696...

Security fix for the ALT Linux 6 package bind version 9.3.5-alt2

June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...

SOL4351 - BIND 9.3.0 denial of service vulnerability CAN-2005-0034

BIG-IP versions 9.0 through 9.0.5 contain BIND version 9.3.0 and are vulnerable if BIND is enabled. To enable BIND on the BIG-IP system, you must log in to the command line and configure it manually; you cannot inadvertently enable BIND. Since BIND is disabled by default, most BIG-IP systems are...

ISC BIND < 9.2.2 DNS Resolver Functions Remote Overflow

The remote BIND 9 DNS server, according to its version number, is vulnerable to a buffer overflow which may allow an attacker to gain a shell on this host or to disable this server. C Tenable Network Security, Inc. Ref: https://www.isc.org/downloads/bind/...

ISC BIND 9 fails to process additional data chains in responses correctly thereby causing the server to fail an internal consistency check

Overview A denial-of-service vulnerability exists in version 9 of the Internet Software Consortium's ISC Berkeley Internet Name Domain BIND server. ISC BIND versions 8 and 4 are not affected. Exploiting this vulnerability will cause vulnerable BIND servers to shut down. Description BIND is an...

BIND memcpy not bounded in case T_SIG of rrextract()

Overview Version 8.2.2 of BIND current circa November 1999 contained a buffer overflow in the routine that converts records from network format to database format. Description Version 8.2.2 of BIND includes some checks for the correct format of a signature record in DNSSEC that previous versions...

ISC BIND 9.x AUTHORS Map Remote Version Disclosure

It was possible to determine that the remote name server is running BIND 9.x by querying it for the AUTHORS map. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10728; scriptversion "$Revision: 1.20 $"; scriptcvsdate"$Date: 2011/08/16 21:07:11 $"; scriptnameenglish:"I...

ISS Advisory: BIND Inadvertent Local Exposure of HMAC-MD5 &#40;TSIG&#41; Keys

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

ISC BIND < 4.9.8 / 8.2.3 Multiple Remote Overflows

The remote BIND server, according to its version number, is affected by various buffer overflow vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10605; scriptversion"1.29";...

CVE-2000-0887

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer ZXFR request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."...

ISC BIND 8.2.2-P6 vulnerable to DoS via compressed zone transfer, aka the "zxfr bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "zxfr bug." It affects ISC BIND version 8.2.2, patch levels 1 through 6. Description Using this vulnerability,...

DNS Server BIND version Directive Remote Version Detection

The remote host is running BIND or another DNS server that reports its version number when it receives a special request for the text 'version.bind' in the domain 'chaos'. This version is not necessarily accurate and could even be forged, as some DNS servers send the information based on a...

DNS_DoS.txt

Subject: Possible Denial Of Service using DNS To: [email protected] SPJ-002-000: .::::::::+ s0ftpr0ject 99 +::::::::. ::::+ Digital Security for Y2K +:::: :::'""""'""""'""""'""""'""'""::: ::'.gS$"$Sn. .gS$"$Sn. Sn.:: :: $$$$$ $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$ $$$$$ $$$$ :: ::...