CVE-2007-1748

A stack-based buffer overflow exists in the RPC interface of the Microsoft DNS Server service. The vulnerability is caused by a boundary error in the DnssrvQuery() function when processing a specially crafted RPC request containing a long zone name with escaped octal strings. This can allow remot...

CVE-2007-1748

Stack-based buffer overflow in the RPC interface in the Domain Name System DNS Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape...

Microsoft Windows DNS Server Escaped Zone Name Parameter Buffer Overflow Vulnerability

Description Microsoft Windows Domain Name System DNS Server Service is prone to a stack-based buffer-overflow vulnerability in its Remote Procedure Call RPC interface. A remote attacker may exploit this issue to run arbitrary code in the context of the DNS Server Service. The DNS service runs in...

CVE-2007-1748: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the RPC interface in the Domain Name System DNS Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape...

Microsoft Security Advisory (935964) Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution

Microsoft Security Advisory 935964 Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution. Published: April 12, 2007 Microsoft is investigating new public reports of a limited attack exploiting a vulnerability in the Domain Name System DNS Server Service in Microsoft Windows...

CVE-2007-1644

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle MITM attacks on web traffic,...

Design/Logic Flaw

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle MITM attacks on web traffic,...

CVE-2007-1644: Undefined Security Weakness

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle MITM attacks on web traffic,...

Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit

No description provided by source. / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acu?a - c 2007 Url: http://www.514.es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records. This feature allows remote...

CVE-2007-1644

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle MITM attacks on web traffic,...

CVE-2007-1644

The CVE-2007-1644 entry concerns the dynamic DNS update mechanism in the Microsoft Windows DNS Server. The issue is that the DNS server’s dynamic update process does not properly authenticate clients in certain deployments/configurations, enabling a remote attacker to modify DNS records for a web...

[Full-disclosure] dproxy - arbitrary code execution through stack buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ ||| Security Advisory AKLINK-SA-2007-001 ||| ||| CVE-2007-1465 CVE candidate ||| ============================================ dproxy - remotely exploitable buffer overflow...

Microsoft DNS Server - Dynamic DNS Update/Change

/ Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acuña - c 2007 Url: http://www.514.es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records. This feature allows remote users to create, change and delete...

Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit

Exploit for unknown platform in category remote exploits ========================================================= Microsoft DNS Server Dynamic DNS Updates Remote Exploit ========================================================= / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres...

Microsoft DNS Server - Dynamic DNS UpdateChange

Microsoft DNS Server - Dynamic DNS UpdateChange / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acuña - c 2007 Url: http://www.514.es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records. This feature...

BIND: Denial of service

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description An unspecified improper usage of an already freed context has been reported. Additionally, an assertion error could be triggered in the DNSSEC validation of some responses to...

bind -- Multiple Denial of Service vulnerabilities

Problem Description: A type ANY query response containing multiple RRsets can trigger an assertion failure. Certain recursive queries can cause the nameserver to crash by using memory which has already been freed. Impact: A remote attacker sending a type ANY query to an authoritative DNS server f...

[SECURITY] Fedora Core 5 Update: bind-9.3.4-1.fc5

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

POC for MS06-041

No description provided by source. !/usr/bin/python POC for MS06-041 Run the python script passing the local ip address as parameter. The DNS server will start listening on this ip address for DNS hostname resolution queries. This script is for testing and educational purpose and so to test this...