4982 matches found
Security Best Practice: Protect Yourself against DNS Cache Poisoning
DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged between hosts on the network. By poisoning a DNS server, a remote attacker could, f...
Debian DSA-1341-2 : bind9 - design error
This update provides fixed packages for the oldstable distribution sarge. For reference the original advisory text : Amit Klein discovered that the BIND name server generates predictable DNS query IDs, which may lead to cache poisoning attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
GLSA-200708-06 : Net::DNS: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-06 Net::DNS: Multiple vulnerabilities hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless...
Net::DNS: Multiple vulnerabilities
Background Net::DNS is a Perl implementation of a DNS resolver. Description hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless loop. Impact A remote attacker could...
BIND 9 DNS Cache Poisoning Exploit (v0.3beta)
No description provided by source. !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: time:ip:port: id: id q: query g: good e: error id: ID to predict...
dnscp.py.txt
!/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge / Coromputer http://www.coromputer.net/ based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g:...
BIND 9 0.3beta - DNS Cache Poisoning
BIND 9 0.3beta - DNS Cache Poisoning !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g: numb...
BIND 9 DNS Cache Poisoning Exploit (v0.3beta)
Exploit for multiple platform in category remote exploits ============================================= BIND 9 DNS Cache Poisoning Exploit v0.3beta ============================================= !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper:...
BIND 9 0.3beta - DNS Cache Poisoning
!/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g: number of good predicted IDs e: number of...
[EXPL] DNS Cache Poison (BIND 9)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
FreeBSD : FreeBSD -- Predictable query ids in named(8) (3de342fb-40be-11dc-aeac-02e0185f8d72)
When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact : An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by predicting the query id for...
Mandrake Linux Security Advisory : bind (MDKSA-2007:149)
The DNS query id generation code in BIND9 is vulnerable to cryptographic analysis which provides a 1-in-8 change of guessing the next query ID for 50% of the query IDs, which could be used by a remote attacker to perform cache poisoning by an attacker CVE-2007-2926. As well, in BIND9 9.4.x, the...
CentOS 3 / 4 / 5 : bind (CESA-2007:0740)
Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. A flaw was found in the way...
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2007:0740)
Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. A flaw was found in the way...
Fedora Core 6 : bind-9.3.4-7.P1.fc6 (2007-647)
CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids - allows cache-poisoning type of attack, no workaround, affect only outgoing queries Note that Tenable Network Security has extracted the preceding description block...
ISC BIND generates cryptographically weak DNS query IDs
Overview ISC Internet Systems Consortiuim BIND generates cryptographically weak DNS query IDs which could allow a remote attacker to poison DNS caches. Description From the ISC Bind security page:The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of...
[SECURITY] [DSA 1342-2] New bind9 packages fix DNS cache poisoning
-------------------------------------------------------------------------- Debian Security Advisory DSA 1341-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1341-1] New bind9 packages fix DNS cache poisoning
-------------------------------------------------------------------------- Debian Security Advisory DSA 1341-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25th, 2007 http://www.debian.org/security/faq -...
bind security update
CentOS Errata and Security Advisory CESA-2007:0740-01 Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Doma...
