6372 matches found
Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability
Exploit for php platform in category web applications ================================================================== Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability ==================================================================...
FreeBSD : FreeBSD -- BIND named(8) cache poisoning with DNSSEC validation (e500b9bf-ca3e-11df-aade-0050568f000c)
If a client requests DNSSEC records with the Checking Disabled CD flag set, BIND may cache the unvalidated responses. These responses may later be returned to another client that has not set the CD flag. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
CVE-2010-2952
Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafte...
CVE-2010-2952: Improper Input Validation
Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafte...
Apache Traffic Server Remote DNS Cache Poisoning Vulnerability
Apache Traffic Server is prone to a remote DNS cache-poisoning vulnerability. An attacker can exploit this issue to divert data from a legitimate site to an attacker-specified site. Successful exploits will allow the attacker to manipulate cache data, potentially facilitating man-in-the-middle,...
Apache Traffic Server Remote DNS Cache Poisoning Vulnerability
Apache Traffic Server is prone to a remote DNS cache-poisoning vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
Multiple Cisco products are vulnerable to DNS cache poisoning attacks due to their use of insufficiently randomized DNS transaction IDs and UDP source ports in the DNS queries that they produce, which may allow an attacker to more easily forge DNS answers that can poison DNS caches. To exploit th...
FreeBSD mbufs() sendfile Cache Poisoning Privilege Escalation
Exploit for freebsd platform in category local exploits ============================================================= FreeBSD mbufs sendfile Cache Poisoning Privilege Escalation ============================================================= / freebsd mbufs sendfile cache poisoning-priv escalation...
FreeBSD - 'mbufs()' sendfile Cache Poisoning Privilege Escalation
/ freebsd x86/x64 sendfile cache local root xpl v2 by Kingcope 2010 -- should h4x any freebsd 8. and 7. prior to 12Jul2010 tampers /bin/sh to contain a shellcode which does ' chmod a+s /tmp/sh chown root /tmp/sh execve /tmp/sh2 ' how to use: terminal 1: $ cp /bin/sh /tmp/sh $ cp /bin/sh /tmp/sh2 ...
FreeBSD - mbufs() sendfile Cache Poisoning Privilege Escalation
FreeBSD - mbufs sendfile Cache Poisoning Privilege Escalation / freebsd x86/x64 sendfile cache local root xpl v2 by Kingcope 2010 -- should h4x any freebsd 8. and 7. prior to 12Jul2010 tampers /bin/sh to contain a shellcode which does ' chmod a+s /tmp/sh chown root /tmp/sh execve /tmp/sh2 ' how t...
Symantec Gateway Products DNS Cache Poisoning (CVE-2005-0817)
The Symantec Firewall has a DNS proxy service, DNSD.exe, that acts as a proxy and cache server for the DNS requests generated by internal systems. When the DNS proxy receives a DNS response from a DNS server, the information in the Authoritative and Additional Record will be saved in the DNS cach...
tomcat multiple content-length header poisioning
Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...
Debian Security Advisory DSA 2054-2 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2054-2. OpenVAS Vulnerability Test $Id: deb20542.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-2054-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
-------------------------------------------------------------------------- Debian Security Advisory DSA 2054-2 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2010 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2054-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2054-1. OpenVAS Vulnerability Test $Id: deb20541.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-2054-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2054-1 : bind9 - DNS cache poisoning
Several cache-poisoning vulnerabilities have been discovered in BIND. These vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default. The Common Vulnerabilities and Exposures project identifies the following problems : -...
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-2054-1 [email protected] http://www.debian.org/security/ Florian Weimer June 04, 2010 http://www.debian.org/security/faq -...
