[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1703-1 [email protected] http://www.debian.org/security/ Florian Weimer January 12, 2009 http://www.debian.org/security/faq -...

DSA-1703-1 bind9 - cryptographic weakness

Bulletin has no description...

USN-706-1: Bind vulnerability

It was discovered that Bind did not properly perform signature verification. When DNSSEC with DSA signatures are in use, a remote attacker could exploit this to bypass signature validation to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web...

Moderate: Red Hat Security Advisory: bind security update

Updated Bind packages to correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name...

FreeBSD Security Advisory (FreeBSD-SA-05:12.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:12.bind.asc ADV FreeBSD-SA-05:12.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Ports: bind9

The remote host is missing an update to the system as announced in the referenced advisory. VID 30e4ed7b-1ca6-11da-bc01-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-05:12.bind9.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:12.bind9.asc ADV FreeBSD-SA-05:12.bind9.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-07:02.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:02.bind.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-05:12.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:12.bind.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 1571-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 1571-1. OpenVAS Vulnerability Test $Id: deb15711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1571-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian and Ubuntu OpenSSL packages contain a predictable random number generator

Overview A vulnerability in the OpenSSL package included with the Debian GNU/Linux operating system and its derivatives may cause weak cryptographic keys to be generated. Description A weakness exists in the random number generator used by the OpenSSL package included with the Debian GNU/Linux...

DSA-1571-1 openssl - predictable random number generator

Bulletin has no description...

Design/Logic Flaw

The DNSSEC validation library libval library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks...

CVE-2008-1184

The DNSSEC validation library libval library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks...

CVE-2008-1184

The CVE-2008-1184 issue affects the dnssec-tools package (libval DNSSEC validation library). The root cause is that libval does not adequately verify that the signing key is the APEX trust anchor, which could enable unspecified attacks. Public sources consistently tie the fix to the 1.3.2 release...

CVE-2008-1184

The DNSSEC validation library libval library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks...

[SECURITY] Fedora 8 Update: dnssec-tools-1.3.2-1.fc8

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

[SECURITY] Fedora 7 Update: dnssec-tools-1.3.2-1.fc7

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

Fedora 8 : dnssec-tools-1.3.2-1.fc8 (2008-1771)

1.3.2 release which contains a small set of fixes over the 1.3 release. The biggest of these fixes is a patch to the libval DNSSEC validation library to ensure that the signature that validates it is a signature of the trust anchor itself. Note that Tenable Network Security has extracted the...