5289 matches found
Mandriva Linux Security Advisory : bind (MDVSA-2010:021)
Some vulnerabilities were discovered and corrected in bind : The original fix for CVE-2009-4022 was found to be incomplete. BIND was incorrectly caching certain responses without performing proper DNSSEC validation. CNAME and DNAME records could be cached, without proper DNSSEC validation, when...
bind, caching security update
CentOS Errata and Security Advisory CESA-2010:0062 Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an...
BIND upstream fix for CVE-2009-4022 is incomplete
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query a...
Moderate: Red Hat Security Advisory: bind security update
Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS...
Debian Security Advisory DSA 1968-1 (pdns-recursor)
The remote host is missing an update to pdns-recursor announced via advisory DSA 1968-1. OpenVAS Vulnerability Test $Id: deb19681.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1968-1 pdns-recursor Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...
ISC BIND DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...
ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning
Binary data 5323.prm...
CVE-2010-0290
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query a...
[Backports-security-announce] Security Update for pdns-recursor
Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...
[Backports-security-announce] Security Update for pdns-recursor
Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...
[SECURITY] [DSA 1968-1] New pdns-recursor packages fix potential code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1968-1 [email protected] http://www.debian.org/security/ Florian Weimer January 08, 2010 http://www.debian.org/security/faq -...
DSA-1968-1 pdns-recursor - potential code execution
Bulletin has no description...
Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2
Dear PowerDNS Users, Two major vulnerabilities have recently been discovered in the PowerDNS Recursor all versions up to and including 3.1.7.1. Over the past two weeks, these vulnerabilities have been addressed, resulting in PowerDNS Recursor 3.1.7.2. Given the nature and magnitude of these...
PowerDNS Recursor Multiple Vulnerabilities (Jan 2010)
PowerDNS Recursor is prone to a remote cache-poisoning vulnerability and to a Buffer Overflow Vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
FreeBSD-SA-10:01.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:01.bind Security Advisory The FreeBSD Project Topic: BIND named8 cache poisoning with DNSSEC validation Category: contrib Module: bind Announced: 2010-01-06...
CentOS 5 : bind (CESA-2009:1620)
"Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS...
FreeBSD -- BIND named(8) cache poisoning with DNSSEC validation
Problem Description: If a client requests DNSSEC records with the Checking Disabled CD flag set, BIND may cache the unvalidated responses. These responses may later be returned to another client that has not set the CD flag...
Debian: Security Advisory (DSA-1961-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1961-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 1961-1. OpenVAS Vulnerability Test $Id: deb19611.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1961-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
[SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-1961-1 [email protected] http://www.debian.org/security/ Florian Weimer December 23, 2009 http://www.debian.org/security/faq -...