CVE-2012-0283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...

ExponentCMS 2.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

ExponentCMS 2.0.5 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

dns-check-zone NSE Script

Checks DNS zone configuration against best practices, including RFC 1912. The configuration checks are divided into categories which each have a number of different tests. Script Arguments dns-check-zone.domain the dns zone to check Example Usage nmap -sn -Pn ns1.example.com --script dns-check-zo...

CVE-2012-1570

Removed by vendor...

PT-2012-3348

Name of the Vulnerable Software and Affected Versions MaraDNS versions prior to 1.3.0.7.15 MaraDNS versions 1.4.x prior to 1.4.12 Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the...

Code injection

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

CVE-2012-1193

The resolver in PowerDNS Recursor aka pdnsrecursor 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

CVE-2012-1194

The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a...

CVE-2012-1191

The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names"...

CVE-2012-1191

CVE-2012-1191 affects the dns resolver in djbdns’s dnscache (version 1.05). The vulnerability arises when processing an A record response, where the resolver overwrites cached NS record names and TTLs, enabling a ghost-domain names attack that can keep revoked domains resolvable. The issue is doc...

CVE-2012-1193

The resolver in PowerDNS Recursor aka pdnsrecursor 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

CVE-2012-1193

PowerDNS Recursor (pdns_recursor) vulnerable to a ghost domain names attack in version 3.3 (and related 3.3.x/3.4.x/3.5 RC1 ranges noted in public advisories). The issue occurs when processing an A-record response: the resolver overwrites cached NS records and TTL values, enabling a remote attack...

PT-2012-3120

Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.4.11 Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the resolver overwrites cached server names and TT...

CVE-2012-1192: Undefined Security Weakness

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

PT-2012-3119

Name of the Vulnerable Software and Affected Versions djbdns version 1.05 Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the resolver in dnscache overwrites cached server names and TTL...

CVE-2012-1193: Undefined Security Weakness

The resolver in PowerDNS Recursor aka pdnsrecursor 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

PT-2012-3121

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 before R2 Description The issue concerns the DNS Server service, where the resolver overwrites cached server names and TTL values in NS records during the processing of a response to an A record query. This allows...

PT-2012-1019

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor version 3.3 Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the resolver in PowerDNS Recursor overwrites cached...

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...