Net::DNS: Multiple vulnerabilities

Background Net::DNS is a Perl implementation of a DNS resolver. Description hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless loop. Impact A remote attacker could...

dnscp.py.txt

!/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge / Coromputer http://www.coromputer.net/ based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g:...

BIND 9 DNS Cache Poisoning Exploit (v0.3beta)

No description provided by source. !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: time:ip:port: id: id q: query g: good e: error id: ID to predict...

BIND 9 0.3beta - DNS Cache Poisoning

BIND 9 0.3beta - DNS Cache Poisoning !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g: numb...

BIND 9 DNS Cache Poisoning Exploit (v0.3beta)

Exploit for multiple platform in category remote exploits ============================================= BIND 9 DNS Cache Poisoning Exploit v0.3beta ============================================= !/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper:...

BIND 9 0.3beta - DNS Cache Poisoning

!/usr/bin/env python """ DNS Cache Poison v0.3beta by posedge based on the Amit Klein paper: http://www.trusteer.com/docs/bind9dns.html output: ::: id: q: g: e: id: ID to predict q: number of queries from the DNS server only queries with LSB at 0 in ID g: number of good predicted IDs e: number of...

[EXPL] DNS Cache Poison (BIND 9)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

FreeBSD : FreeBSD -- Predictable query ids in named(8) (3de342fb-40be-11dc-aeac-02e0185f8d72)

When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact : An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by predicting the query id for...

CentOS 3 / 4 / 5 : bind (CESA-2007:0740)

Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. A flaw was found in the way...

Mandrake Linux Security Advisory : bind (MDKSA-2007:149)

The DNS query id generation code in BIND9 is vulnerable to cryptographic analysis which provides a 1-in-8 change of guessing the next query ID for 50% of the query IDs, which could be used by a remote attacker to perform cache poisoning by an attacker CVE-2007-2926. As well, in BIND9 9.4.x, the...

RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2007:0740)

Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. A flaw was found in the way...

Fedora Core 6 : bind-9.3.4-7.P1.fc6 (2007-647)

CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids - allows cache-poisoning type of attack, no workaround, affect only outgoing queries Note that Tenable Network Security has extracted the preceding description block...

ISC BIND generates cryptographically weak DNS query IDs

Overview ISC Internet Systems Consortiuim BIND generates cryptographically weak DNS query IDs which could allow a remote attacker to poison DNS caches. Description From the ISC Bind security page:The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of...

[SECURITY] [DSA 1342-2] New bind9 packages fix DNS cache poisoning

-------------------------------------------------------------------------- Debian Security Advisory DSA 1341-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1341-1] New bind9 packages fix DNS cache poisoning

-------------------------------------------------------------------------- Debian Security Advisory DSA 1341-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25th, 2007 http://www.debian.org/security/faq -...

bind security update

CentOS Errata and Security Advisory CESA-2007:0740-01 Updated bind packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Doma...

DSA-1341-2 bind9 - DNS cache poisoning vulnerability

Bulletin has no description...

DEBIAN-CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

Design/Logic Flaw

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...