USN-622-1: Bind vulnerability

Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Bind. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

DEBIAN-CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

bind use-after-free

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

GLSA-200702-06 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200702-06 BIND: Denial of Service An unspecified improper usage of an already freed context has been reported. Additionally, an assertion error could be triggered in the DNSSEC validation of some responses to type ANY queries with...

DEBIAN-CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

DEBIAN-CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

PT-2007-1953 · Isc +1 · Isc Bind +1

Name of the Vulnerable Software and Affected Versions: ISC BIND versions 9.3.0 through 9.3.3 ISC BIND versions 9.4.0a1 through 9.4.0a6 ISC BIND versions 9.4.0b1 through 9.4.0b4 ISC BIND version 9.4.0rc1 ISC BIND version 9.5.0a1 Description: The issue allows remote attackers to cause a denial of...

CVE-2005-0034

An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service named server exit via crafted DNS packets that cause an internal consistency test self-check to fail...

HP-UX Security patch : PHNE_14617

The remote host is missing HP-UX Security Patch number PHNE14617 . Security Vulnerability in BIND on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16760; scriptversion"1.8";...

HP-UX PHNE_12957 : s700_800 11.00 Bind 4.9.7 components

s700800 11.00 Bind 4.9.7 components : Security vulnerability in the BIND executable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE12957. The text itself is copyright C Hewlett-Packard Development Company...

HP-UX Security patch : PHNE_20618

The remote host is missing HP-UX Security Patch number PHNE20618 . Sec. Vulnerability in BIND %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16525; scriptversion"1.8"; name"english...

HP-UX Security patch : PHNE_21288

The remote host is missing HP-UX Security Patch number PHNE21288 . Sec. Vulnerability in BIND %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16833; scriptversion"1.7"; name"english...

HP-UX Security patch : PHNE_23439

The remote host is missing HP-UX Security Patch number PHNE23439 . Sec. Vulnerability in BIND %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16654; scriptversion"1.7"; name"english...

HP-UX Security patch : PHNE_23277

The remote host is missing HP-UX Security Patch number PHNE23277 . Sec. Vulnerability in BIND %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16682; scriptversion"1.7"; name"english...

HP-UX PHNE_30068 : HP-UX Running Bind 8.1.2, Remote Denial of Service (DoS) (HPSBUX00303 SSRT3653 rev.2)

s700800 11.11 Bind 8.1.2 Patch : Potential security vulnerability in Bind 8.1.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE30068. The text itself is copyright C Hewlett-Packard Development Company, L....

HP-UX Security patch : PHNE_16204

The remote host is missing HP-UX Security Patch number PHNE16204 . Security Vulnerability in BIND on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16663; scriptversion"1.7";...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2005-0033

Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service crash via queries that trigger the overflow in the qusedns array that tracks nameservers and addresses...