[SECURITY] Fedora 8 Update: bind-9.5.0-28.P1.fc8

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...

Microsoft Windows DNS Server Cache Poisoning Vulnerability

Description Microsoft Windows DNS servers are prone to a vulnerability that lets attackers poison DNS caches. This occurs because the software fails to properly handle responses containing data outside of their authority. Successfully exploiting this issue allows remote attackers to poison DNS...

SuSE 10 Security Update : bind (ZYPP Patch Number 5274)

The IP number for the 'L' root DNS server changed. This patch updates the root.hint zone file to get the new IP number. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GLSA-200806-01 : mtr: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200806-01 mtr: Stack-based buffer overflow Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact : A remote attacker could use a...

mtr: Stack-based buffer overflow

Background mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. Description Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact A remote attack...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

mtr (multiprotocol traceroute) buffer overflow

Buffer overflow on DNS server response parsing...

[SECURITY] Fedora 8 Update: pdns-recursor-3.1.5-1.fc8

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 7 Update: pdns-recursor-3.1.5-1.fc7

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

CVE-2008-1654

Interaction error between Adobe Flash and multiple Universal Plug and Play UPnP services allow remote attackers to perform Cross-Site Request Forgery CSRF style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primar...

Authentication flaw

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

Domain name hijacking an attack technique detailed answers-vulnerability warning-the black bar safety net

近期 发现 adobe.com,internet.com,nike.com,etc. of the famous sites are points exposed to attack, But the attackers of the use of technology is not to be used in the invasion ofthe WEB server,change the home page's dominant hand Method,the attacker uses a domain name hijacking an attack technique,the...

[SECURITY] Fedora 7 Update: bind-9.4.2-3.fc7

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 8 Update: bind-9.5.0-23.b1.fc8

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

MaraDNS DNS server DoS

CNAME record fails to resolve on malformed packet...

[SECURITY] Fedora 7 Update: bind-9.4.2-2.fc7

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Microsoft Windows递归DNS欺骗漏洞（MS07-062）

BUGTRAQ ID: 25919 CVECAN ID: CVE-2007-3898 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的DNS服务器实现上存在漏洞，远程攻击者可能利用此漏洞导致DNS欺骗。 在向上游DNS服务器发送请求时Windows的DNS服务（dns.exe）使用了可预测的事件，这允许攻击者执行DNS缓存破坏攻击。当DNS服务器执行递归查询的时候，攻击者就可以通过特制的DNS响应导致欺骗或者从合法位置重定向Internet流量。 Microsoft Windows Server 2003 x64 Edition Microsoft...