CVE-2008-3439: Improper Control of Generation of Code

SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Debian DSA-1623-1 : dnsmasq - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's dnsmasq packages to implement the recommended...

CVE-2008-3441: Improper Control of Generation of Code

Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning

------------------------------------------------------------------------ Debian Security Advisory DSA-1623-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...

phpx-cookie.txt

======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypass Date: 31 July 2008...

PHPX 3.5.16 Cookie Poisoning and Login Bypass Vulnerability

Exploit for unknown platform in category web applications =========================================================== PHPX 3.5.16 Cookie Poisoning and Login Bypass Vulnerability =========================================================== Application: phpx http://www.phpx.org/project.php stable...

PHPX 3.5.16 - Cookie Poisoning Authentication Bypass

PHPX 3.5.16 - Cookie Poisoning Authentication Bypass ======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie...

DSA-1623-1 dnsmasq - cache poisoning

Bulletin has no description...

PHPX 3.5.16 - Cookie Poisoning / Authentication Bypass

======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypass Date: 31 July 2008...

About the DNS Cache Poison-bug warning-the black bar safety net

Author: Gale Cool cool over the weekend my spare time is generally not the Internet, and ran back a look, found on the Internet or the overwhelming of the DNS vulnerability. Hype too much, didn't want to write this exploit. Recently it seems that all people who blog are anxious to bring this...

DNS BailiWicked Host Attack

No description provided by source. /msf3/msfconsole require 'msf/core' require 'net/dns' require 'scruby' require 'resolv' module Msf class Auxiliary::Spoof::Dns::BailiWickedHost Msf::Auxiliary include Exploit::Remote::Ip def initializeinfo = superupdateinfoinfo, 'Name' = 'DNS BailiWicked Host...

Multiple DNS servers and clients DNS records spoofing

DNS poisoning attack may be used to spoof query results...

Debian DSA-1619-1 : python-dns - DNS response spoofing

Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...

BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (c)

No description provided by source. / Exploit for CVE-2008-1447 - Kaminsky DNS Cache Poisoning Attack Compilation: $ gcc -o kaminsky-attack kaminsky-attack.c dnet-config --libs -lm Dependency: libdnet aka libdumbnet-dev under Ubuntu Author: marc.bevand at rapid7 dot com / define BSDSOURCE include...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy

------------------------------------------------------------------------ Debian Security Advisory DSA-1617-1 [email protected] http://www.debian.org/security/ Devin Carraway July 25, 2008 http://www.debian.org/security/faq -...

DNS cache poisoning details leaked-vulnerability warning-the black bar safety net

Yesterday Mantasano on an article describing the Dan Kaminsky DNS name server attack details. The article was published a few minutes after that to be deleted. Although Dan Kaminsky have combined The vendor released a patch, but is still in the patch of the push phase, there are still a...

BIND 9.x - Remote DNS Cache Poisoning

BIND 9.x - Remote DNS Cache Poisoning / Exploit for CVE-2008-1447 - Kaminsky DNS Cache Poisoning Attack Compilation: $ gcc -o kaminsky-attack kaminsky-attack.c dnet-config --libs -lm Dependency: libdnet aka libdumbnet-dev under Ubuntu Author: marc.bevand at rapid7 dot com / define BSDSOURCE inclu...

CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit

/ / | | | | ----====/ // / | || |====---- | | | || | | | | | | | | | | | | | ------====== / /| || || || |======------ / || || / Computer Academic Underground http://www.caughq.org Exploit Code ===============/======================================================== Exploit ID: CAU-EX-2008-0002...

BIND 9.x - Remote DNS Cache Poisoning

/ Exploit for CVE-2008-1447 - Kaminsky DNS Cache Poisoning Attack Compilation: $ gcc -o kaminsky-attack kaminsky-attack.c dnet-config --libs -lm Dependency: libdnet aka libdumbnet-dev under Ubuntu Author: marc.bevand at rapid7 dot com / define BSDSOURCE include include include include include...