libxml2 various overflows

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 libxml2, and possibly other versions, may allow remote attackers to execute arbitrary code via 1 a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, 2 a long proxy URL containing FTP data that is not properly handled...

security flaw

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

PT-2003-1623 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue is related to the improper handling of certain strings in multiple dissectors, including BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, and RMI. The consequences of this issue are...

DEBIAN-CVE-2002-2097

The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets...

DEBIAN-CVE-2002-1146

The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...

DEBIAN-CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server...

security flaw

DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service CPU consumption via a malformed packet that causes Ethereal to enter an infinite loop...

PT-2001-2544 · Microsoft · Windows 2000 Server +1

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 Server Description: The issue allows remote attackers to poison the DNS cache via spoofed DNS responses because DNS servers cache glue records received from non-delegated name servers by default. Recommendations: F...

Advisory CA-2001-02

CERT Advisory CA-2001-02 Multiple Vulnerabilities in BIND Original release date: January 29, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Domain Name System DNS Servers running various versions of ISC BIND including both...

PT-1997-1008 · Isc · Bind

Name of the Vulnerable Software and Affected Versions: BIND affected versions not specified Description: The issue involves DNS cache poisoning via BIND, which is made possible by predictable query IDs. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-1997-1085 · Isc · Bind

Name of the Vulnerable Software and Affected Versions: bind affected versions not specified Description: The issue allows malicious modification of DNS records due to the ability to perform dynamic updates to the DNS server when compiled with the -DALLOW UPDATES option. Recommendations: For...

PT-1997-1153 · Unknown · Dns Server

Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue concerns a DNS server that permits inverse queries, which could potentially be exploited. Recommendations: At the moment, there is no information about a newer version that...

PT-2010-5658 · Isc +2 · Isc Bind +2

Name of the Vulnerable Software and Affected Versions: ISC BIND versions 9.0.x through 9.3.x ISC BIND versions 9.4 before 9.4.3-P5 ISC BIND versions 9.5 before 9.5.2-P2 ISC BIND versions 9.6 before 9.6.1-P3 ISC BIND version 9.7.0 beta Description: The issue allows remote attackers to conduct DNS...