2361 matches found
CVE-2003-1132
The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...
CVE-2003-1132: Undefined Security Weakness
The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...
CVE-2001-1452: Origin Validation Error
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
dnsmasq < 2.21.0 Multiple Remote Vulnerabilities
The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...
USN-84-1: Squid vulnerabilities
When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...
Multiple Vendor DNS Response Flooding Denial Of Service
The remote DNS server is vulnerable to a denial of service attack because it replies to DNS responses. An attacker could exploit this vulnerability by spoofing a DNS packet so that it appears to come from 127.0.0.1 and make the remote DNS server enter into an infinite loop, therefore denying...
CVE-2004-0836
Buffer overflow in the mysqlrealconnect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length hlength...
Windows SMTP service buffer overflow
Buffer overflows during preconfigured DNS server reply analisys...
CVE-2002-1219
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...
CVE-2002-1219
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...
CVE-2002-1219: Undefined Security Weakness
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...
MySQL < 4.0.21 mysql_real_connect() Function Remote Overflow
The remote host is running a version of MySQL that is older than 4.0.21. MySQL is a database that runs on both Linux/BSD and Windows platforms. This version is vulnerable to a length overflow within it's mysqlrealconnect function. The overflow is due to an error in the processing of a return Doma...
DNS Server Zone Transfer Allowed
Binary data 1017.prm...
ISC BIND DNS Server Unsupported Version Detection
Binary data 1000.prm...
DNS Server Detection
Binary data 1016.prm...
Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)
A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...
Symantec Enterprise Firewall DNSD cache poisoning Vulnerability
Symantec Enterprise Firewall dnsd proxy, versions 8 and later, is vulnerable to cache poisoning attacks when acting as a caching nameserver. Is possible to inject false entries in its cache and make a false DNS server look like authoritative of a zone, when it is not. Once this information is...
Symantec Enterprise Firewall 7.08.0 - DNSD DNS Cache Poisoning
Symantec Enterprise Firewall 7.08.0 - DNSD DNS Cache Poisoning source: https://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the...
Symantec Enterprise Firewall 7.0/8.0 - DNSD DNS Cache Poisoning
source: https://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the requested records. An attacker could exploit this vulnerability to...
DNS Server Cache Snooping Remote Information Disclosure
The remote DNS server responds to queries for third-party domains that do not have the recursion bit set. This may allow a remote attacker to determine which domains have recently been resolved via this name server, and therefore which hosts have been recently visited. For instance, if an attacke...