7573 matches found
CVE-2002-2212
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...
CVE-2002-1937
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...
CVE-2002-2213
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed...
Various DNS service implementations generate multiple simultaneous queries for the same resource record
Overview Various implementations of DNS services may allow multiple simultaneous queries for the same resource record, allowing an attacker to apply probabilistic techniques to improve their odds of successful DNS spoofing. Description Some implementations of DNS services contain a vulnerability...
Re: хэндшейк ICQ
Hello, 3APA3A! Если не сложно, кинь advisory на [email protected]. Можно вместе с программой, положу на www.security.nnov.ru. See attach. Адвайз писать смысла нет, ибо тезис про "шифрование" в аське касается всех версий протокола, его использовавших. Насколько я знаю, в 7 версии эту фигню...
[SECURITY] [DSA 153-2] New mantis package fixes several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 153-2 [email protected] http://www.debian.org/security/ Martin Schulze August 20th, 2002 http://www.debian.org/security/faq -...
[Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis
Mantis Advisory/2002-01 SQL poisoning vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source web-based bugtracking system, written i...
poprelayd & sendmail Arbitrary Mail Relay
Nessus has detected that the remote SMTP server allows relaying for users which were identified by 'POP before SMTP'. The access control mechanism is based on the POP server logs. However, it is possible to poison these logs, which means that any spammer could be using your mail server to send...
Microsoft Windows domain name resolver service accepts responses from non-queried DNS servers by default
Overview Systems running Microsoft Windows 98, NT, Windows 2000, or Windows XP DNS resolvers accept DNS replies from any IP address, not just the ones being sent DNS requests. This may lead to domain information spoofing or DNS cache poisoning. Description Microsoft Windows systems use a caching...
remote winamp 2.x exploit (all current versions)
2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...
Outlook \r expliots - ripMIME fix.
A recent announcement of ripMIME 1.2.12 has been superceded with a new release which covers several issues as mentioned in [email protected]'s content-exploits analysis post. Specifically, "0 data poisoning" and "fake-end-of-line termination" due to fgets have been immediately covered. Issu...
Атаки на подмену ARP-записей через беспроводные устройства (wireless arp poisoning)
Многие беспроводные устройства осуществляют прозрачный бриджинг между внутренней и беспроводной сетью, что позволяет исопльзовать приемы arp-спуфинга из внешней сети...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
PT-2001-2544 · Microsoft · Windows 2000 Server +1
Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 Server Description: The issue allows remote attackers to poison the DNS cache via spoofed DNS responses because DNS servers cache glue records received from non-delegated name servers by default. Recommendations: F...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
CVE-2001-1474
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...
DNS Server Recursive Query Cache Poisoning Weakness
It is possible to query the remote name server for third-party names. If this is your internal nameserver, then the attack vector may be limited to employees or guest access if allowed. If you are probing a remote nameserver, then it allows anyone to use it to resolve third party names such as...