Microsoft Windows DNS Server response validation vulnerability

Overview The Microsoft Windows DNS server contains a response validation vulnerability. If successfully exploited, this vulnerability may allow an attacker to poison the affected DNS server's cache. Description The Domain Name System DNS is responsible for translating host names to IP addresses a...

DNS TXT Record Parsing Buffer Overflow (CVE-2008-2469)

The Domain Name System DNS client service resolves and caches DNS names. LibSPF2 is a widely deployed implementation of Sender Policy Framework SPF. A buffer overflow vulnerability was reported in LibSPF2. An attacker who runs a malicious DNS server can exploit this vulnerability by sending a...

CVE-2008-6194

Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service memory consumption via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898...

CVE-2008-6194

CVE-2008-6194 is a memory-leak vulnerability in the Microsoft Windows DNS server that can be exploited remotely via DNS packets to cause a denial of service through memory consumption. The issue is noted as stemming from an incorrect fix for CVE-2007-3898. The connected documents do not specify a...

CVE-2008-6194

Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service memory consumption via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898...

CVE-2008-6194: Undefined Security Weakness

Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service memory consumption via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898...

Fedora Update for pdns-recursor FEDORA-2008-3010

Check for the Version of pdns-recursor OpenVAS Vulnerability Test Fedora Update for pdns-recursor FEDORA-2008-3010 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

DNS Server Spoofed Request Amplification DDoS

The remote DNS server answers to any request. It is possible to query the name servers NS of the root zone '.' and get an answer that is bigger than the original request. By spoofing the source IP address, a remote attacker can leverage this 'amplification' to launch a denial of service attack...

[SECURITY] Fedora 10 Update: bind-9.5.1-1.P1.fc10

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

DNS Server Dynamic Update Record Injection

It was possible to add a record into a zone using the DNS dynamic update protocol, as described by RFC 2136. This protocol can be used by DHCP clients to enter their host names into the DNS maps, but it could be subverted by malicious users to redirect network traffic. C Tenable Network Security,...

DNS Server hostname.bind Map Hostname Disclosure

It is possible to learn the remote host name by querying the remote DNS server for 'hostname.bind' in the CHAOS domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35371; scriptversion"$Revision: 1.11 $"; scriptcvsdate"$Date: 2011/09/14 15:27:29 $";...

pdnsd: Denial of Service and cache poisoning

Background pdnsd is a proxy DNS server with permanent caching that is designed to cope with unreachable DNS servers. Description Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to...

Cisco Global Site Selector DNS服务器拒绝服务漏洞

BUGTRAQ ID: 33152 CVE ID：CVE-2008-3819 CNCVE ID：CNCVE-20083819 Cisco Global Site Selector是一款全球服务器网络负载均衡解决方案。 Cisco Global Site Selector处理特殊序列的DNS请求存在问题，远程攻击者可以利用漏洞使GSS的DNS服务崩溃。 当DNS服务器崩溃时，会出现类似如下的日志信息： Dec 18 04:47:21 gss NMR-6-LAUNCHSVREXIT27261 dnsserver' has exited ExitUnknown139" 漏洞的Cisco Bug...

Avahi multicast DNS server DoS

assert on UDP packet with SRC port 0...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...

dns-random-txid NSE Script

Checks a DNS server for the predictable-TXID DNS recursion vulnerability. Predictable TXID values can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying txidtest.dns-oarc.net see . Be aware that any targets against which this script is run will...

dns-random-srcport NSE Script

Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see . Be aware that any targets against which this script is run will be...