Lucene search
+L

238 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/04 12:00 a.m.•6 views

CVE-2016-1284: Improper Input Validation

rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via crafted flag values in a query...

5.9CVSS6.2AI score0.03338EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/04/30 12:00 a.m.•40 views

HP-UX Update for BIND HPSBUX02519

Check for the Version of BIND OpenVAS Vulnerability Test HP-UX Update for BIND HPSBUX02519 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

4.3CVSS8AI score0.09363EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/04/30 12:00 a.m.•51 views

HP-UX Update for BIND HPSBUX02519

Check for the Version of BIND OpenVAS Vulnerability Test HP-UX Update for BIND HPSBUX02519 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

4.3CVSS8AI score0.09363EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/01/25 12:00 a.m.•39 views

RedHat Update for bind RHSA-2010:0062-02

Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2010:0062-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

4.3CVSS8.1AI score0.09363EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2010/01/22 10:00 p.m.•22 views

DEBIAN-CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

4.3CVSS7.3AI score0.09363EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2010/01/22 10:00 p.m.•18 views

CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

6.3AI score0.09363EPSS
SaveExploits0References36
Prion
Prion
•added 2010/01/22 10:00 p.m.•30 views

Code injection

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

4.3CVSS7AI score0.09363EPSS
SaveExploits0References36Affected Software1
CVE
CVE
•added 2010/01/22 9:20 p.m.•247 views

CVE-2010-0097

CVE-2010-0097 affects ISC BIND 9.x where DNSSEC validation of NSEC/NSEC3 records is flawed, enabling remote attackers to add the AD flag to forged NXDOMAIN responses for an existing domain. Public advisories confirm fixes in later BIND releases (upstream: 9.6-ESV-R1 and 9.7.0.dfsg) and point to u...

4.3CVSS7.7AI score0.09363EPSS
SaveExploits0References36Affected Software1
Mend
Mend
•added 2010/01/22 9:20 p.m.•5 views

CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

6.3CVSS0.09363EPSS
SaveExploits0References38
Debian CVE
Debian CVE
•added 2010/01/22 9:20 p.m.•31 views

CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

4.3CVSS7.5AI score0.09363EPSS
SaveExploits0
Cvelist
Cvelist
•added 2010/01/22 9:20 p.m.•32 views

CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

8AI score0.09363EPSS
SaveExploits0References36
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/22 12:00 a.m.•8 views

CVE-2010-0097: Improper Input Validation

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

4.3CVSS5.9AI score0.09363EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2010/01/22 12:00 a.m.•66 views

ISC BIND 9 DNSSEC NSEC/NSEC3 Bogus NXDOMAIN Responses

According to its version number, the remote installation of BIND suffers from a cache poisoning vulnerability. The vulnerability exists due to an error in DNSSEC NSEC/NSEC3 validation code which could cause caching of bogus NXDOMAIN responses without correctly validating them. This issue affects...

4.3CVSS7.3AI score0.09363EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2010/01/19 12:00 a.m.•27 views

CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records, which allows remote attackers to add the Authenticated Data AD flag to a forged NXDOMAIN response for an existing domain...

4.3CVSS7.1AI score0.09363EPSS
SaveExploits0References3
CERT
CERT
•added 2010/01/19 12:00 a.m.•68 views

BIND 9 DNSSEC validation code could cause fake NXDOMAIN responses

Overview A vulnerability exists in the BIND 9 DNSSEC validation code that could be used by an attacker to generate fake NXDOMAIN responses. Description BIND 9 contains a vulnerability in DNSSEC validation code. According to ISC: There was an error in the DNSSEC NSEC/NSEC3 validation code that cou...

4.3CVSS7.4AI score0.09363EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/21 12:00 a.m.•10 views

CVE-2003-1132: Undefined Security Weakness

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

5CVSS5.9AI score0.02115EPSS
SaveExploits0References1
NVD
NVD
•added 2003/12/31 5:00 a.m.•37 views

CVE-2003-1132

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

5CVSS7AI score0.02115EPSS
SaveExploits0References2
CERT
CERT
•added 2003/03/26 12:00 a.m.•29 views

Incorrect NXDOMAIN responses from AAAA queries could cause denial-of-service conditions

Overview Some DNS servers respond with an inappropriate error message if queried for nonexistent AAAA records, which can lead to possible denial of service. Description Some DNS servers respond with a "Name Error" response code NXDOMAIN, RCODE 3 instead of "No Error" RCODE 0 when queried for a...

7.1AI score
SaveExploits0References6
Rows per page
Query Builder