745 matches found
BIND T_NXT record processing may cause buffer overflow
Overview A vulnerability in BIND, repaired in verison 8.2.2p5, allows remote attackers to execute code with the privileges of the process running named. This vulnerability was widely exploited from November 1999 to December 2000. Description There is a buffer overflow in the processing of NXT...
FreeBSD-SA-01:10.bind
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:10 Security Advisory FreeBSD, Inc. Topic: bind remote denial of service Category: core, ports Module: bind Announced: 2001-01-23 Credits: Fabio Pietrosanti Affects:...
CVE-2000-0888
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."...
CVE-2000-0887
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer ZXFR request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."...
[SECURITY] New version of Debian bind packages released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 12, 2000 - ---------------------------------------------------------------------------- Package: bind Vulnerability:...
ISC BIND < 8.2.2-P7 Compressed ZXFR Name Service Query DoS
The remote BIND server, according to its version number, is vulnerable to the 'ZXFR bug' that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10549; scriptversion"1.22"; scriptcvsdate"Date: 2018/06/27 18:42:25";...
ISC BIND 8.2.2-P5 - Denial of Service
ISC BIND 8.2.2-P5 - Denial of Service source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in...
CVE-1999-0837
Denial of service in BIND by improperly closing TCP sessions via solinger...
CVE-1999-0835
Denial of service in BIND named via malformed SIG records...
CVE-1999-0833
Buffer overflow in BIND 8.2 via NXT records...
[SECURITY] New version of bind released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 17, 1999 - ------------------------------------------------------------------------ The version bind that was distributed...
[SECURITY] New version of bind released
The version bind that was distributed in Debian GNU/Linux 2.1 has a vulnerability in the processing of NXT records that can be used by an attacked in a Debian of Service attack or theoretically be exploited to gain access to the server. This has been fixed in version 8.2.5p5-0slink1, and we...
CVE-1999-0833
Buffer overflow in BIND 8.2 via NXT records...
CVE-1999-0835
Denial of service in BIND named via malformed SIG records...
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs...
CVE-1999-0184
When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records...
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer...
altavista.firewall97.txt
Date: Thu, 25 Feb 1999 12:57:20 +0100 From: Jochen Thomas Bauer To: [email protected] Subject: AltaVista Firewall97 Hello everyone, Before I begin I want to make one thing clear: I told AltaVista about this problem about 4 weeks ago. The next day I got a reply saying that my message had been...
ISC BIND 4.9.7 -T1B - named SIGINT / SIGIOT Symlink
source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in the system. The named daemons will append named...