5047 matches found
CVE-2002-2211
BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed responses, which increases the possibility of...
CVE-2002-2212
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...
CVE-2002-2213
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed...
Various DNS service implementations generate multiple simultaneous queries for the same resource record
Overview Various implementations of DNS services may allow multiple simultaneous queries for the same resource record, allowing an attacker to apply probabilistic techniques to improve their odds of successful DNS spoofing. Description Some implementations of DNS services contain a vulnerability...
Microsoft Windows domain name resolver service accepts responses from non-queried DNS servers by default
Overview Systems running Microsoft Windows 98, NT, Windows 2000, or Windows XP DNS resolvers accept DNS replies from any IP address, not just the ones being sent DNS requests. This may lead to domain information spoofing or DNS cache poisoning. Description Microsoft Windows systems use a caching...
remote winamp 2.x exploit (all current versions)
2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
PT-2001-2544 · Microsoft · Windows 2000 Server +1
Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 Server Description: The issue allows remote attackers to poison the DNS cache via spoofed DNS responses because DNS servers cache glue records received from non-delegated name servers by default. Recommendations: F...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
CVE-2001-1474
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...
DNS Server Recursive Query Cache Poisoning Weakness
It is possible to query the remote name server for third-party names. If this is your internal nameserver, then the attack vector may be limited to employees or guest access if allowed. If you are probing a remote nameserver, then it allows anyone to use it to resolve third party names such as...
Серьезная проблема с реализацией NetBIOS (NetBT) в Windows
Используя отсутствие проверки отправителя датаграммы можно подменить записи в кэше имен NetBIOS...
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache...
PT-2000-1997 · Microsoft · Windows 98 +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...
CVE-1999-0165
Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.
CVE-1999-0165
NFS cache poisoning...