CVE-2005-0877

Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...

DEBIAN-CVE-2005-0877

Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...

CVE-2001-1474

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...

CVE-2001-1474

CVE-2001-1474 concerns SSH prior to version 2.0, where host key checking is disabled when connecting to localhost. This creates a vulnerability condition that can be exploited by poisoning the client’s DNS cache to silently redirect connections to localhost. The description in the connected docum...

CVE-2001-1452

Affected software: Windows NT 4.0 and Windows 2000 Server. Vulnerability: DNS servers cache glue records from non-delegated name servers by default, enabling remote attackers to poison the DNS cache via spoofed DNS responses. Root cause: Default caching behavior of glue records. Impact: DNS cache...

CVE-2000-1218

The CVE relates to Microsoft Windows 98, NT 4.0, 2000, and XP where the default domain name resolver configuration sets QueryIpMatching to 0. This causes the resolver to accept DNS updates from hosts it did not query, enabling DNS cache poisoning by a remote attacker. The PTSecurity entry confirm...

CVE-2001-1474: Undefined Security Weakness

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...

CVE-2000-1218: Origin Validation Error

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache...

CVE-2001-1452: Origin Validation Error

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...

CVE-2005-1180

Technical details about CVE-2005-1180 are not publicly provided in the supplied connected documents. The records here restate the vulnerability description without additional specifics on affected versions, fixes, or exploit information. Monitor for updates.

GLSA-200504-03 : Dnsmasq: Poisoning and Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-03 Dnsmasq: Poisoning and Denial of Service vulnerabilities Dnsmasq does not properly detect that DNS replies received do not correspond to any DNS query that was sent. Rob Holland of the Gentoo Linux Security Audit team al...

Dnsmasq: Poisoning and Denial of Service vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Dnsmasq does not properly detect that DNS replies received do not correspond to any DNS query that was sent. Rob Holland of the Gentoo Linux Security Audit team also discovered two off-by-one...

CVE-2005-0877

Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...

CVE-2005-0877: Origin Validation Error

Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq...

PT-2005-1905 · Dnsmasq · Dnsmasq

Name of the Vulnerable Software and Affected Versions: Dnsmasq versions prior to 2.21 Description: The issue allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. Recommendations: For versions prior to 2.21, update to version 2.21 or later to resolv...

[SA14691] Dnsmasq DHCP Lease File Denial of Service and DNS Cache Poisoning

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Dnsmasq DHCP Lease File Denial of Service and DNS Cach...

dnsmasq < 2.21.0 Multiple Remote Vulnerabilities

The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...

Dnsmasq DNS forwarder multiple vulnerabilities

Buffer overflow, DNS poisoning...

Trillian Multiple HTTP Responses Buffer Overflow Vulnerabilities

The remote host has the Trillian program installed. Trillian is a Peer2Peer client that allows users to chat and share files with other users across the world. The remote version of this software is vulnerable to several buffer overflows when processing malformed responses. An attacker could...

phorumSplit.txt

Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...