122 matches found
Gentoo Security Advisory GLSA 200411-20 (ez-ipupdate)
The remote host is missing updates announced in advisory GLSA 200411-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200411-20 (ez-ipupdate)
The remote host is missing updates announced in advisory GLSA 200411-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200609-11 (bind)
The remote host is missing updates announced in advisory GLSA 200609-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: p5-Net-DNS
The remote host is missing an update to the system as announced in the referenced advisory. VID d2b8a963-3d59-11dc-b3d3-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: p5-Net-DNS
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
USN-594-1: libnet-dns-perl vulnerability
It was discovered that Net::DNS did not correctly validate the size of DNS replies. A remote attacker could send a specially crafted DNS response and cause applications using Net::DNS to abort, leading to a denial of service...
MaraDNS: CNAME Denial of service
Background MaraDNS is a package that implements the Domain Name Service DNS with resolver and caching ability. Description Michael Krieger reported that a specially crafted DNS could prevent an authoritative canonical name CNAME record from being resolved because of an "improper rotation of...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
Code injection
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
CVE-2007-6341 affects Net::DNS (Net::DNS perl module) in version 0.60 build 654, used by SpamAssassin and OTRS. A crafted DNS response can cause a remote DoS (process crash croak). Public references show Debian/Ubuntu patches and advisories updating libnet-dns-perl to fixed releases (e.g., DSA-15...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
Perl Net::DNS DNS应答远程拒绝服务漏洞
BUGTRAQ ID: 26902 CVE ID:CVE-2007-6341 Perl Net::DNS是一款使用Perl实现的DNS解析应用程序。 Perl Net::DNS不正确处理畸形应答请求,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于Net/DNS/RR/A.pm: if $self-"rdlength" 0 $self-"address" = inetntoasubstr$$data, $offset, 4; 由于在使用substr时不正确验证$$data有4字节可读,可导致数据发送给inetntoa不足够而导致触发如下代码: ipaddress =...
Perl Net::DNS 0.480.590.60 - DNS Response Remote Denial of Service
Perl Net::DNS 0.480.590.60 - DNS Response Remote Denial of Service source: https://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this...
Perl Net::DNS package multiple security vulnerabilities
Weak DNS ID generation allows response spoofing, DoS on parsing DNS request...
[UNIX] Net::DNS Malformed Packet DoS
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Perl Net::DNS 0.48/0.59/0.60 - DNS Response Remote Denial of Service
source: https://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this issue allows attackers to crash applications that use the affected...
SuSE 10 Security Update : perl-Net-DNS (ZYPP Patch Number 4046)
perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...