237 matches found
IBM Security Access Manager for Web Multicast DNS Information Disclosure Vulnerability
IBM Security Access Manager ISAM for Web formerly known as IBM Tivoli Access Manager for e-business is a suite of IBM products for user authentication, authorization, and Web single sign-on solutions that provide user access management and Web application protection Functions. An information...
Synology DiskStation Manager Multicast DNS (mDNS) responder denial of service vulnerability
Synology DiskStation Manager is the first NAS operating system to provide a user interface for network multitasking. A security vulnerability exists in the Synology DiskStation Manager Multicast DNS mDNS responder, which can be exploited by remote attackers to gain access to sensitive information...
Multicast DNS Vulnerability Could Lead to DDOS Amplification
The Department of Homeland Security sponsored CERT at Carnegie Mellon University on Tuesday released an advisory warning infrastructure providers of a vulnerability in Multicast DNS, or mDNS, that could leak device information that could be leveraged in high volume DDoS amplification attacks. “I...
Design/Logic Flaw
The Multicast DNS mDNS responder in Synology DiskStation Manager DSM before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via...
Code injection
The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...
CVE-2015-2809
The Multicast DNS mDNS responder in Synology DiskStation Manager DSM before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via...
Multicast DNS (mDNS) implementations may respond to unicast queries originating outside the local link
Overview Multicast DNS implementations may respond to unicast queries that originate from sources outside of the local link network. Such responses may disclose information about network devices or be used in denial-of-service DoS amplification attacks. Description Multicast DNS mDNS is a way for...
Scientific Linux Security Update : avahi on SL5.x i386/x86_64
A flaw was found in the way the Avahi daemon avahi-daemon processed Multicast DNS mDNS packets with corrupted checksums. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to exit unexpectedly via specially crafted mDNS packets. CVE-2010-2244 A flaw was...
Scientific Linux Security Update : avahi on SL5.x i386/x86_64
A flaw was found in the way the Avahi daemon avahi-daemon processed Multicast DNS mDNS packets with an empty payload. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to enter an infinite loop via an empty mDNS UDP packet. CVE-2011-1002 After installin...
CentOS Update for avahi CESA-2011:0436 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for avahi CESA-2011:0436 centos5 x86_64
Check for the Version of avahi OpenVAS Vulnerability Test CentOS Update for avahi CESA-2011:0436 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
RedHat Update for avahi RHSA-2011:0779-01
Check for the Version of avahi OpenVAS Vulnerability Test RedHat Update for avahi RHSA-2011:0779-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
CentOS Update for avahi CESA-2009:0013 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for avahi CESA-2010:0528 centos5 i386
Check for the Version of avahi OpenVAS Vulnerability Test CentOS Update for avahi CESA-2010:0528 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CentOS Update for avahi CESA-2010:0528 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for avahi CESA-2011:0436 centos5 i386
Check for the Version of avahi OpenVAS Vulnerability Test CentOS Update for avahi CESA-2011:0436 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
RHEL 6 : avahi (RHSA-2011:0779)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0779 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service...
Moderate: Red Hat Security Advisory: avahi security and bug fix update
Updated avahi packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
RedHat Update for avahi RHSA-2011:0436-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for avahi RHSA-2011:0436-01
Check for the Version of avahi OpenVAS Vulnerability Test RedHat Update for avahi RHSA-2011:0436-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...