5965 matches found
USN-2519-1 eglibc, glibc vulnerabilities
Arnaud Le Blanc discovered that the GNU C Library incorrectly handled file descriptors when resolving DNS queries under high load. This may cause a denial of service in other applications, or an information leak. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...
CVE-2015-0832
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . dot character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.5...
CVE-2015-0832
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . dot character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.5...
PT-2015-4901
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue arises from the improper recognition of domain name equivalence with and without a trailing dot character, allowing man-in-the-middle attackers to bypass HPKP and HSTS protection...
KLA10464 Multiple vulnerabilities in Mozilla products
Multiple serious vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privilleges, obtain sensitiv information, execute arbitrary code, spoof user interface or read local files. Below is a complete list of...
UBUNTU-CVE-2014-9402
The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...
ISC BIND Remote Denial of Service Vulnerability (CNVD-2015-01326)
ISC BIND is an implementation of the DNS protocol. A remote denial of service vulnerability exists in the ISC BIND Trust Anchor management, which allows an attacker to submit a malicious request to crash the name service program...
DEBIAN-CVE-2015-1349
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...
Updated hexchat packages fix security vulnerability
HexChat did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name...
CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...
D-Link DSL-2740R Web Interface Authentication Bypass Vulnerability
The D-Link DSL-2740R is a home wireless ADSL router. An authentication bypass vulnerability exists in the D-Link DSL-2740R web interface, which can be exploited by attackers to modify DNS settings, intercept sessions, or launch denial of service attacks...
PT-2015-5024 · D Link · D-Link Dsl-2730B
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2730B router rev C1 with firmware GE 1.01 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via several parameters, including the domainname parameter to "dnsProxy.cmd" DNS Proxy...
Eucalyptus Denial of Service Vulnerability (CNVD-2015-00109)
Eucalyptus is an open source software infrastructure used to enable elastic, utility cloud computing through compute clusters or groups of workstations. A denial of service vulnerability exists in Eucalyptus versions 3.3.x and 3.4.x prior to 3.4.2 that allows remote attackers to cause a denial of...
Huawei Tecal RH Series Has Multiple Vulnerabilities
Huawei Tecal RH Series is a rackmount server product. The Huawei Tecal RH Series device fails to properly validate user HTTP requests when processing the length of DNS server packets, allowing the user to perform certain actions resulting in buffer overflows or execution of arbitrary code...
Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029) - Ver2 (CVE-2007-1748)
The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...
Mandriva Linux Security Advisory : bind (MDVSA-2014:238)
Updated bind packages fix security vulnerability : By making use of maliciously-constructed zones or a rogue server, an attacker can exploit an oversight in the code BIND 9 uses to follow delegations in the Domain Name Service, causing BIND to issue unlimited queries in an attempt to follow the...
社工kesionCMS新网域名管理,腾讯企业邮箱
简要描述： 话不多说,看图 详细说明： 漏洞证明：...
UBUNTU-CVE-2014-4883
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...
DEBIAN-CVE-2014-7821
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service crash via a crafted dnsnameservers value in the DNS configuration...
