Microsoft Windows - WINS Remote Buffer Overflow (MS04-045) (3)

Microsoft Windows - WINS Remote Buffer Overflow MS04-045 3 / Windows Internet Name Service WINS Remote Heap Buffer Overflow ------------------------------------ ------------------------------------ Advisory credits: ---------------- Nicolas Waisman of Immunity Inc. www.immunitysec.com Advisory...

Debian DSA-196-1 : bind - several vulnerabilities

Bind version 9, the bind9 package, is not affected by these problems. ISS X-Force has discovered several serious vulnerabilities in the Berkeley Internet Name Domain Server BIND. BIND is the most common implementation of the DNS Domain Name Service protocol, which is used on the vast majority of...

Multiple Samba bugs

DoS against NetBIOS name service nmbd, endless loop in SMBD...

NetBIOS Name Service Reply Information Disclosure

Binary data 1922.prm...

ISC BIND 8 Compressed ZXFR Name Service Query DoS (deprecated)

Binary data 1013.prm...

security flaw

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

Multiple Symantec firewall products contain a heap corruption vulnerability in the handling of NBNS response packets

Overview There is a heap corruption vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...

CVE-2003-0661

The CVE-2003-0661 entry concerns the NetBIOS NBNS information disclosure vulnerability in Windows NT 4.0, 2000, XP, and Server 2003. The NBNS response may leak random memory contents from the target, potentially revealing sensitive data to remote attackers. Public details across connected documen...

CVE-2003-0661

The NetBT Name Service NBNS for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitive information...

CVE-2003-0176

The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...

CVE-2003-0176

CVE-2003-0176 affects the IRIX Name Service Daemon (nsd) running as an NIS master on SGI IRIX 6.5.x (through 6.5.20f and possibly earlier). The vulnerability allows remote attackers to cause a denial of service (crash) by sending UDP port scans to nsd. Public sources in connected documents confir...

CVE-2003-0176

The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...

Multiple Vulnerabilities in Name Service Daemon (nsd) on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in Name Service Daemon nsd Number : 20030701-01-P Date : July 16, 2003 Reference: CVE CAN-2003-0176, CAN-2003-0177, CAN-2003-0572, CAN-2003-0573 Reference: SGI BUGS 844401, 866833, 862096, 849491 Fixed in :...

List of Security Fixes in Windows 2000 Service Pack 4

List of Security Fixes in Windows 2000 Service Pack 4 The information in this article applies to: Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Server SP4 SUMMARY This article describes the following security-related bugs and update...

CVE-2003-0174

The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...

PT-2003-1416 · Sgi · Irix

Name of the Vulnerable Software and Affected Versions: IRIX versions 6.5.19 and earlier Description: The issue concerns the LDAP name service nsd not properly verifying if the USERPASSWORD attribute has been provided by an LDAP server. This could allow attackers to log in without a password...

CVE-2002-0511

The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...

DEBIAN-CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr...

CVE-2002-0038

Vulnerability in the cache-limiting function of the unified name service daemon nsd in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk...

CVE-2000-0887

ISC BIND 8.2.x before 8.2.2-P7 is vulnerable to a remote denial‑of‑service via a compressed ZXFR zone transfer and a subsequent non‑cached authoritative query (the zxfr bug). An attacker permitted to perform zone transfers can crash the named daemon, disrupting DNS resolution. A patch to BIND 8.2...