Lucene search
+L

690 matches found

seebug.org
seebug.org
•added 2008/07/24 12:00 a.m.•108 views

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)

No description provided by source. from scapy import import random Copyright C 2008 Julien Desfossez [email protected] http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwa...

5CVSS7.1AI score0.95182EPSS
SaveExploits21
exploitpack
exploitpack
•added 2008/07/24 12:00 a.m.•241 views

BIND 9.x - Remote DNS Cache Poisoning (Python)

BIND 9.x - Remote DNS Cache Poisoning Python from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

5CVSS7.2AI score0.95182EPSS
SaveExploits21
Exploit DB
Exploit DB
•added 2008/07/24 12:00 a.m.•245 views

BIND 9.x - Remote DNS Cache Poisoning

from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, o...

6.8CVSS6.7AI score0.95182EPSS
SaveExploits21
securityvulns
securityvulns
•added 2008/07/12 12:00 a.m.•111 views

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

5CVSS6.6AI score0.95182EPSS
SaveExploits21
Debian
Debian
•added 2008/07/08 5:05 p.m.•70 views

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

6.8CVSS6.8AI score0.95182EPSS
SaveExploits21
Debian
Debian
•added 2008/07/08 5:03 p.m.•64 views

[SECURITY] [DSA 1604-1] BIND 8 deprecation notice

------------------------------------------------------------------------ Debian Security Advisory DSA-1604-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

6.8CVSS6.8AI score0.95182EPSS
SaveExploits21
OSV
OSV
•added 2008/07/08 12:00 a.m.•12 views

DSA-1605-1 glibc - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS spoofing and cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. At this time, it is not possible to implement the recommended...

6.9AI score
SaveExploits0
OSV
OSV
•added 2008/07/08 12:00 a.m.•11 views

DSA-1604-1 bind - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. The BIND 8 legacy code base could not be updated to include the recommended...

7.2AI score
SaveExploits0
OSV
OSV
•added 2008/07/08 12:00 a.m.•59 views

DSA-1603-1 bind9 - cache poisoning

Bulletin has no description...

6.8CVSS6.9AI score0.95182EPSS
SaveExploits21
UbuntuCve
UbuntuCve
•added 2008/01/16 2:00 a.m.•48 views

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

10CVSS7.1AI score0.12399EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2007/08/08 12:00 a.m.•12 views

BIND 9 DNS Cache Poisoning Exploit (v0.3beta)

No description provided by source. !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: time:ip:port: id: id q: query g: good e: error id: ID to predict...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/08/07 12:00 a.m.•46 views

[EXPL] DNS Cache Poison (BIND 9)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

7.2AI score
SaveExploits0
Prion
Prion
•added 2007/07/24 5:30 p.m.•43 views

Design/Logic Flaw

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

4.3CVSS6.4AI score0.1309EPSS
SaveExploits1References67Affected Software1
UbuntuCve
UbuntuCve
•added 2007/07/24 5:30 p.m.•32 views

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

4.3CVSS6.7AI score0.1309EPSS
SaveExploits1References2
NVD
NVD
•added 2007/07/24 5:30 p.m.•33 views

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

4.3CVSS7.1AI score0.1309EPSS
SaveExploits1References67
OSV
OSV
•added 2007/07/24 5:30 p.m.•17 views

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

6.6AI score
SaveExploits0References67
CVE
CVE
•added 2007/07/24 5:00 p.m.•188 views

CVE-2007-2926

CVE-2007-2926 affects ISC BIND 9.x up to 9.5.0a5, where the DNS query ID generator used during answering resolver questions or sending NOTIFY messages uses a weak RNG. This enables a remote attacker to more easily guess query IDs and poison caches. The issue is specific to outgoing queries from B...

4.3CVSS7.4AI score0.1309EPSS
SaveExploits1References67Affected Software1
Cvelist
Cvelist
•added 2007/07/24 5:00 p.m.•44 views

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

7.5AI score0.1309EPSS
SaveExploits1References67
securityvulns
securityvulns
•added 2007/07/24 12:00 a.m.•56 views

"BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)

I discovered a new weakness in BIND 9 DNS server which enables "DNS Forgery Pharming". An attacker can remotely poison the cache of any BIND 9 caching DNS server and force users who use this DNS server to reach fraudulent websites each time they try to access real websites. BIND 9 is the most...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/05/01 12:00 a.m.•24 views

ISC BIND 9 'query.c' Function Unspecified Recursive Query DoS

Binary data 3978.prm...

7.1CVSS7.3AI score0.07552EPSS
SaveExploits0References5
Rows per page
Query Builder