88 matches found
CVE-2011-1966: Improper Input Validation
The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...
PT-2011-3508
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue arises from the DNS server's improper handling of NAPTR queries that trigger recursive processing. This allows remote...
Microsoft Windows DNS Server NAPTR Query Remote Heap Memory Corruption Vulnerability
Description The Microsoft Windows DNS Server is prone to a remote heap-based memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies...
Microsoft DNS Server NAPTR Response Code Execution (MS11-058; CVE-2011-1966)
A remote code execution vulnerability has been reported in Microsoft Windows DNS server service. The vulnerability is due to an error in the way the DNS server handles specially crafted DNS responses. A remote attacker can exploit this issue by sending a specially crafted DNS NAPTR response to an...
CVE-1999-0851
Denial of service in BIND named via naptr...
CVE-1999-0851
CVE-1999-0851 affects ISC BIND with a denial-of-service via naptr. Connected sources indicate multiple remote vulnerabilities in BIND and provide a remediation: upgrade to BIND 8.2.2-P5 or 4.9.7-REL. The vulnerability is described as DoS on the named service; no exploit details or vector are prov...
