4982 matches found
remote winamp 2.x exploit (all current versions)
2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
PT-2001-2544 · Microsoft · Windows 2000 Server +1
Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 Server Description: The issue allows remote attackers to poison the DNS cache via spoofed DNS responses because DNS servers cache glue records received from non-delegated name servers by default. Recommendations: F...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
CVE-2001-1474
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...
DNS Server Recursive Query Cache Poisoning Weakness
It is possible to query the remote name server for third-party names. If this is your internal nameserver, then the attack vector may be limited to employees or guest access if allowed. If you are probing a remote nameserver, then it allows anyone to use it to resolve third party names such as...
Серьезная проблема с реализацией NetBIOS (NetBT) в Windows
Используя отсутствие проверки отправителя датаграммы можно подменить записи в кэше имен NetBIOS...
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache...
PT-2000-1997 · Microsoft · Windows 98 +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...
CVE-1999-0667
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service...
CVE-1999-0165
NFS cache poisoning...
CVE-1999-0165
Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs...
CVE-1999-0024
CVE-1999-0024 describes a DNS cache-poisoning flaw in BIND caused by predictable DNS query IDs. The connected sources consistently state DNS cache poisoning via BIND, with related discussions in Red Hat/Security advisories and CERT context. The materials do not provide a concrete patch version or...
PT-1997-1000 · D Link +4 · Dsr-500 +7
Name of the Vulnerable Software and Affected Versions: Cisco IOS affected versions not specified Zyxel ZyWALL USG 300 affected versions not specified D-Link DSR-1000 affected versions not specified D-Link DSR-500 affected versions not specified D-Link DSR-250 affected versions not specified D-Lin...
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs...
PT-1997-1008 · Isc · Bind
Name of the Vulnerable Software and Affected Versions: BIND affected versions not specified Description: The issue involves DNS cache poisoning via BIND, which is made possible by predictable query IDs. Recommendations: At the moment, there is no information about a newer version that contains a...