CVE-2011-5114

Multiple cross-site scripting XSS vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 zoneid or 2 scope parameter...

PT-2012-2092

Name of the Vulnerable Software and Affected Versions Barracuda Link Balancer 330 Firmware versions 1.3.2.005 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Authoritative DNS - DNS Zones page. These vulnerabilities allow remote attackers to...

Debian Security Advisory DSA 2486-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2486-1. OpenVAS Vulnerability Test $Id: deb24861.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2486-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] Fedora 16 Update: nsd-3.2.12-1.fc16

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution thanks to Olaf...

Debian DSA-2486-1 : bind9 - denial of service

It was discovered that BIND, a DNS server, can crash while processing resource records containing no data bytes. Both authoritative servers and resolvers are affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

dns/bind9* -- zero-length RDATA can cause named to terminate, reveal memory

ISC reports: Processing of DNS resource records where the rdata field is zero length may cause various issues for the servers handling them. Processing of these records may lead to unexpected outcomes. Recursive servers may crash or disclose some portion of memory to the client. Secondary servers...

DEBIAN-CVE-2012-0206

commonstartup.cc in PowerDNS aka pdns Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service packet loop via a crafted UDP DNS response...

CVE-2012-0206

commonstartup.cc in PowerDNS aka pdns Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service packet loop via a crafted UDP DNS response...

Debian Security Advisory DSA 2385-1 (pdns)

The remote host is missing an update to pdns announced via advisory DSA 2385-1. OpenVAS Vulnerability Test $Id: deb23851.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2385-1 pdns Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Does DNSSEC Really Interfere With SOPA/PIPA?

You’ve of course heard by now that much of the Internet community thinks that SOPA and PIPA are bad, which is why on January 16, Wikipedia shut itself down, Google had a black bar over their logo, etc. This opinion is shared by much of the Internet technical community, and in particular much has...

PowerDNS Authoritative Server < 2.9.22.5 / 3.0.1 Response Packet Parsing DoS

According to its self-reported version number, the version of the PowerDNS service listening on the remote host is prior to 2.9.22.5 or 3.0.1. It is, therefore, affected by a denial of service vulnerability due to improper handling of response packets. A remote attacker can exploit this, via a...

PT-2012-1018

Name of the Vulnerable Software and Affected Versions PowerDNS pdns Authoritative Server versions prior to 2.9.22.5 PowerDNS pdns Authoritative Server versions 3.x prior to 3.0.1 Description The issue allows remote attackers to cause a denial of service, specifically a packet loop, via crafted UD...

CVE-2011-5056

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5056

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5056

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5056

Removed by vendor...

BIND -- Remote DoS against authoritative and recursive servers

ISC reports: A defect in the affected BIND 9 versions allows an attacker to remotely cause the "named" process to exit using a specially crafted packet. This defect affects both recursive and authoritative servers...

Debian DSA-2208-1 : bind9 - denial of service

It was discovered that BIND, a DNS server, contains a race condition when processing zones updates in an authoritative server, either through dynamic DNS updates or incremental zone transfer IXFR. Such an update while processing a query could result in deadlock and denial of service. CVE-2011-041...

DEBIAN-CVE-2011-0414

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...

CVE-2011-0414

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service deadlock and daemon hang by sending a query at the time of 1 an IXFR transfer or 2 a DDNS update...