MS16-071: Security Update for Microsoft Windows DNS Server (3164065)

The remote Windows host is affected by a remote code execution vulnerability in the Windows Domain Name System DNS server due to improper handling of DNS requests. An unauthenticated, remote attacker can exploit this, via specially crafted DNS requests, to execute arbitrary code in the context of...

MS07-029: Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966) (uncredentialed check)

According to its self-reported version number, the Microsoft DNS Server running on the remote host contains an issue that could allow an attacker to execute arbitrary code with SYSTEM privileges. To exploit this issue, an attacker needs to connect to the DNS server RPC interface and send malforme...

Microsoft Windows DNS Server远程拒绝服务漏洞(MS12-017)

BUGTRAQ ID: 52374 CVE ID: CVE-2012-0006 Windows DNS Server是微软公司推出的域名系统或者域名服务，域名系统为Internet上的主机分配域名地址和IP地址。 Windows DNS Server在处理某些lookup查询时，在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成DNS服务器停止响应，拒绝服务合法用户。 0 Microsoft Server 2008 Microsoft Server 2003 厂商补丁： Microsoft ---------...

Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)

This host is missing an important security update according to Microsoft Bulletin MS12-017. OpenVAS Vulnerability Test $Id: secpodms12-017.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Windows DNS Server Denial of Service Vulnerability 2647170 Authors: Antu Sanadi Copyright: Copyright c 201...

Microsoft WIndows DNS Server DoS

Crash on request processing...

Microsoft Windows DNS Server (CVE-2012-0006) Remote Denial of Service Vulnerability

Description The Microsoft Windows DNS Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the DNS server service to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)

This host is missing a critical security update according to Microsoft Bulletin MS11-058. OpenVAS Vulnerability Test $Id: secpodms11-058.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows DNS Server Remote Code Execution Vulnerability 2562485 Authors: Veerendra G.G Copyright: Copyright c 2011...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...

CVE-2009-0234

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted...

Input validation

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted...

Input validation

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict...

Design/Logic Flaw

Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD feature, and conduct...

CVE-2009-0234

CVE-2009-0234 concerns the DNS Resolver Cache Service (DNSCache) in Windows DNS Server. The vulnerability arises from the DNS server’s handling of crafted DNS responses, where improper caching could let remote attackers predict transaction IDs and poison caches by sending numerous crafted queries...

CVE-2009-0093

MS09-008 fixes multiple DNS/WINS vulnerabilities in Windows servers that could allow remote attackers to spoof WPAD/ISATAP and hijack network traffic. The WPAD vulnerability (CVE-2009-0093) arises when dynamic updates are enabled and WPAD/ISATAP registrations are not restricted in DNS, enabling a...

CVE-2009-0093

Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD feature, and conduct...

CVE-2009-0234

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted...

Microsoft DNS Server Validation Spoofing Weakness (MS09-008; CVE-2009-0233; CVE-2009-0234)

Multiple spoofing vulnerabilities have been reported in Windows DNS server. These vulnerabilities could allow a remote attacker to spoof responses and insert records into the DNS server's cache. The DNS caching resolver service saves the responses to DNS queries so that the DNS server is not...

Microsoft Windows DNS Server Incorrect Caching DNS Spoofing Vulnerability

Description The Microsoft Windows DNS Server is prone to a DNS-spoofing vulnerability because the software fails to cache responses to specially crafted DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to redirect network traffic and to...

Microsoft Windows DNS服务器缓存中毒漏洞（MS08-037）

BUGTRAQ ID: 30132 CVECAN ID: CVE-2008-1454 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的DNS服务实现上存在漏洞，在某些情况下Windows的DNS服务器可能接受远程服务器权威以外的响应。未经认证的远程攻击者可以向有漏洞系统的DNS请求回复恶意响应，从而使DNS缓存中毒，并将Internet通讯从合法位置重定向至其他位置。 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 20...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...