6127 matches found
CVE-2000-1218: Origin Validation Error
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache...
CVE-2001-1474: Undefined Security Weakness
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...
CVE-2001-1452: Origin Validation Error
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
CVE-2005-1180
Technical details about CVE-2005-1180 are not publicly provided in the supplied connected documents. The records here restate the vulnerability description without additional specifics on affected versions, fixes, or exploit information. Monitor for updates.
CVE-2005-0877
Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...
CVE-2005-0877: Origin Validation Error
Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...
PT-2005-1905 · Dnsmasq · Dnsmasq
Name of the Vulnerable Software and Affected Versions: Dnsmasq versions prior to 2.21 Description: The issue allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. Recommendations: For versions prior to 2.21, update to version 2.21 or later to resolv...
dnsmasq < 2.21.0 Multiple Remote Vulnerabilities
The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...
phorumSplit.txt
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
[ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
CVE-2005-0817
CVE-2005-0817 affects Symantec Gateway products by a DNS proxy service (DNSD.exe) that caches DNS responses without proper verification, enabling DNS cache poisoning and potential site spoofing/Man-in-the-Middle. Affected products include DNS proxy/cache in Symantec Gateway Security 5400/5300, En...
CVE-2005-0817: Undefined Security Weakness
Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites...
CVE-2004-1754
The DNS proxy DNSd for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records...
CVE-2004-1754: Undefined Security Weakness
The DNS proxy DNSd for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records...
security flaw
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...
security flaw
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size...
security flaw
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack...
GLSA-200502-04 : Squid: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200502-04 Squid: Multiple vulnerabilities Squid contains several vulnerabilities: Buffer overflow when handling WCCP recvfrom CAN-2005-0211. Loose checking of HTTP headers CAN-2005-0173 and CAN-2005-0174. Incorrect handling of LDA...
security flaw
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size...
security flaw
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...