74 matches found
CheckPoint Firewall / VPN-1 information leakage
It's possible to obtain host names...
DSA-2329-1 torque - buffer overflow
Bulletin has no description...
SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4316)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 This update also fixes...
DD-WRT 24-preSP2 - Information Disclosure
DD-WRT 24-preSP2 - Information Disclosure Exploit Title: DD-WRT Information Disclosure Vulnerability Date: 26-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a...
DD-WRT Information Disclosure Vulnerability
Exploit for hardware platform in category remote exploits Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a DD-WRT router and internal clients, including IP addresses, M...
DD-WRT 24-preSP2 - Information Disclosure
Exploit Title: DD-WRT Information Disclosure Vulnerability Date: 26-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a DD-WRT router and internal clients,...
[SECURITY] Fedora 14 Update: bind-9.7.2-4.P3.fc14
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
No-IP Windows Dynamic Update Client Detection
The No-IP Windows dynamic update client is installed on the remote Windows host. This software is intended to map a dynamic IP address, such as those found on a residential broadband or dialup connection, to a static host name, such as www.example.com. It can also be abused to host unsanctioned...
[SECURITY] Fedora Core 5 Update: bind-9.3.4-1.fc5
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
squid -- possible information disclosure
The squid-2.5 patches pages notes: In certain conditions Squid returns random data as error messages in response to malformed host name, possibly leaking random internal information which may come from other requests...
Domain Name System (DNS) resolver libraries vulnerable to read buffer overflow
Overview DNS stub resolvers from multiple vendors contain a buffer overflow vulnerability. The impact of this vulnerability appears to be limited to denial of service. Description A read buffer overflow vulnerability exists in BIND 4 and BIND 8.2.x stub resolver libraries. Other resolver librarie...
Дырка в libc (getnameinfo)
Длинное имя хоста вызывает переполнение буфера в функции getnameinfo, в отдельных случаях может быть использовано для DoS против сервера...
