37 matches found
CVE-2006-0527
BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...
CVE-2002-1221
CVE-2002-1221 affects BIND 8.x through 8.3.3; remote attacker can cause a denial of service (crash) by sending SIG RR elements with invalid expiry times. The invalid entries are removed from the internal BIND database and can later trigger a null dereference. Debian and related advisories (DSA-19...
ISC BIND 8 vulnerable to cache poisoning via negative responses
Overview The BIND 8 name server contains a cache poisoning vulnerability that allows attackers to conduct denial-of-service attacks on specific target domains. Description Several versions of the BIND 8 name server are vulnerable to cache poisoning via negative responses. To exploit this...
FreeBSD-SA-03:19.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:19.bind Security Advisory The FreeBSD Project Topic: bind8 negative cache poison attack Category: contrib Module: contribbind Announced: 2003-11-28 Credits:...
bind8 negative cache poison attack
A programming error in BIND 8 named can result in a DNS message being incorrectly cached as a negative response. As a result, an attacker may arrange for malicious DNS messages to be delivered to a target name server, and cause that name server to cache a negative response for some target domain...
FreeBSD-SA-02:43.bind
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:43.bind Security Advisory The FreeBSD Project Topic: multiple vulnerabilities in BIND REVISED Category: core Module: bind Announced: 2002-11-15 Credits: ISS X-Force...
CVE-2001-0012
CVE-2001-0012 concerns ISC BIND 4.x and 8.x where an information-leak vulnerability allows a remote attacker to access environment variables by sending a specially crafted query. The CERT/CC and Debian/Red Hat advisories document that this issue arises in BIND 4/8 and can lead to leakage of sensi...
CVE-2001-0012
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables...
CVE-2001-0010
CVE-2001-0010 describes a buffer overflow in the TSIG handling code of ISC BIND. The vulnerability is in BIND 8.2.x (and related TSIG processing paths) and can allow remote attackers to gain the same privileges as the BIND server (typically root) by sending specially crafted requests, enabling ar...
CVE-2001-0010
Buffer overflow in transaction signature TSIG handling code in BIND 8 allows remote attackers to gain root privileges...
CVE-2001-0010
Buffer overflow in transaction signature TSIG handling code in BIND 8 allows remote attackers to gain root privileges...
[SECURITY] [DSA 026-1] New version of BIND 8 released
---------------------------------------------------------------------------- Debian Security Advisory DSA-026-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29, 2001 - ---------------------------------------------------------------------------- Package : bind...
CVE-1999-0010
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages...
CVE-1999-0011
CVE-1999-0011 corresponds to Denial of Service vulnerabilities in BIND 4.9 and BIND 8, reported across multiple vendors. Public records indicate DoS via CNAME records and zone transfers. Affected products include BIND 4.9.x and 8.x; the root cause is not detailed in the provided documents beyond ...
CVE-1999-0009
Summary of CVE-1999-0009 from connected documents : The issue is an inverse query buffer overflow in BIND releases 4.9 and 8. The Red Hat entry mirrors the description: the vulnerability is an inverse query buffer overflow in BIND 4.9 and 8 releases. Tenable/Nessus references indicate this is a r...
CVE-1999-0010
CVE-1999-0010 describes a Denial of Service vulnerability in BIND 8 releases caused by maliciously formatted DNS messages. Connected docs corroborate the DoS issue and note remediation in HP-UX via patch PHNE_12957 for s700_800 11.00 Bind 4.9.7 components; other records repeat the DoS description...