Vulnerabilities in DNS Could Allow Spoofing (953230)

This host is missing critical security update according to Microsoft Bulletin MS08-037. OpenVAS Vulnerability Test $Id: secpodms08-037900005.nasl 6382 2017-06-20 15:08:09Z cfischer $ Description: Vulnerabilities in DNS Could Allow Spoofing 953230 Authors: Chandan S Copyright: Copyright C 2008...

Debian: Security Advisory (DSA-1623-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1544-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1623-1 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory DSA 1623-1. OpenVAS Vulnerability Test $Id: deb16231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1623-1 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1619-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIND 9.5.0-P2 (randomized ports) Remote DNS Cache Poisoning Exploit

No description provided by source. Successfully poisoned the latest BIND with fully randomized ports! Exploit required to send more than 130 thousand of requests for the fake records like 131737-4795-15081.blah.com to be able to match port and ID and insert poisoned entry for the...

BIND 9.5.0-P2 - Randomized Ports Remote DNS Cache Poisoning

BIND 9.5.0-P2 - Randomized Ports Remote DNS Cache Poisoning Successfully poisoned the latest BIND with fully randomized ports! Exploit required to send more than 130 thousand of requests for the fake records like 131737-4795-15081.blah.com to be able to match port and ID and insert poisoned entry...

BIND 9.5.0-P2 (randomized ports) Remote DNS Cache Poisoning Exploit

Exploit for multiple platform in category remote exploits =================================================================== BIND 9.5.0-P2 randomized ports Remote DNS Cache Poisoning Exploit =================================================================== Successfully poisoned the latest BIND...

BIND 9.5.0-P2 - 'Randomized Ports' Remote DNS Cache Poisoning

Successfully poisoned the latest BIND with fully randomized ports! Exploit required to send more than 130 thousand of requests for the fake records like 131737-4795-15081.blah.com to be able to match port and ID and insert poisoned entry for the poisoneddns.blah.com. dig @localhost www.blah.com...

PowerDNS Authoritative Server Malformed Query Cache Poisoning Weakness

The remote DNS drops malformed queries. If it is not just a resolver and serves a domain name, this may help poisoning the cache of other DNS resolvers. PoweDNS 2.9.21 and earlier are known to exhibit this behavior. Note that this does not mean that this server would be vulnerable to cache...

HP-UX PHNE_37865 : HP-UX Running BIND, Remote DNS Cache Poisoning (HPSBUX02351 SSRT080058 rev.6)

s700800 11.23 Bind 9.2.0 components : A potential security vulnerability has been identified with HP-UX running BIND. The vulnerability could be exploited remotely to cause DNS cache poisoning. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plug...

CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

Code injection

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

DEBIAN-CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217...

CVE-2008-3337

Technical details for CVE-2008-3337 are not publicly available in the provided documents. Monitor for updates; no confirmed affected products, root cause, or fixes are described here.

BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (spoof on ircd)

No description provided by source. / h0dnsspoof.c - zmda - [email protected] - spoof dns on ircd's using the h0dns code - spoof dns on anything using the adns asynchronous dns resolver code - The bug: - Static source port used by the adns code - Sequential DNS ids in request packets - Initiate...

Design/Logic Flaw

Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Design/Logic Flaw

Sun Java 1.6.003 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...