FreeBSD : c-ares -- DNS Cache Poisoning Vulnerability (70ae62b0-16b0-11dc-b803-0016179b2dd5)

Secunia reports : The vulnerability is caused due to predictable DNS 'Transaction ID' field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

c-ares -- DNS Cache Poisoning Vulnerability

Secunia reports: The vulnerability is caused due to predictable DNS "Transaction ID" field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed...

DNS spoofing techniques-vulnerability warning-the black bar safety net

Article author: Spacefox, Secure Sphere Crew Translation author: Conan, OS3 Open Source Software Society / CICC SingaporeCenter of International Cooperation for Computerization in Singapore Information source: est Overview: what is DNS spoofing it? DNS spoofing is a door to change the DNS of the...

CVE-2002-2212

CVE-2002-2212 affects the DNS resolver in Fujitsu UXP/V. The vulnerability allows remote attackers to perform DNS cache poisoning through a birthday-attack using many concurrent DNS queries and spoofed responses, increasing the chance of a correct spoofed reply more efficiently than brute force. ...

CVE-2002-2211

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed responses, which increases the possibility of...

CVE-2006-2479

The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...

Design/Logic Flaw

The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...

CVE-2006-2479

The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site...

CVE-2006-2479

Technical details about CVE-2006-2479 are not publicly provided in the supplied documents. Monitor for updates; current records summarize the issue at a high level without specifics on affected versions, vectors, or mitigations.

[Full-disclosure] Multiple Vulns in Bitrix CMS

Multiple Vulns in Bitrix CMS Vendor bitrix.com Version The latest one 4.1.x Severity Medium Patched: No Multiple vulnerabilities discovered in Bitrix CMS. A remote attacker can conduct XSS attacks and compromise vulnerable system. 1. A remote attacker can get information about version history and...

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

Memory corruption

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

CVE-2006-0527

CVE-2006-0527 affects BIND 4 and BIND 8 when used as a target forwarder; it describes a Kashpureff-style DNS cache corruption that allows remote attackers to gain privileged access. The connected sources corroborate the same vulnerability description across NVD, CVE records, and repository entrie...

CVE-2006-0527

BIND 4 BIND4 and BIND 8 BIND8, if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack...

CVE-2005-3899

The automatic update feature in Google Talk allows remote attackers to cause a denial of service CPU and memory consumption by poisoning a target's DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug...

CVE-2005-3899

CVE-2005-3899 concerns Google Talk’s automatic update mechanism. The vulnerability allows remote attackers to trigger a denial of service by poisoning a target’s DNS cache and forcing a large update file to be processed, which consumes CPU and memory during signature verification. The provided do...

Slackware 10.0 / 10.1 / current : dnsmasq (SSA:2005-201-01)

New dnsmasq packages are available for Slackware 10.0, 10.1, and -current to fix security issues. An off-by-one overflow vulnerability may allow a DHCP client to create a denial of service condition. Additional code was also added to detect and defeat attempts to poison the DNS cache. %NASLMINLEV...

CVE-2004-2483

Technical details about CVE-2004-2483 are not publicly available in the supplied documents; monitor for updates from official advisories. The provided references reiterate impact but do not add new specifics.

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...