435 matches found
CVE-2011-0657
CVE-2011-0657 affects the DNSAPI.dll DNS client in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, Windows 7 SP1). Root cause: improper processing of DNS queries by the DNS client, enabling remote attackers to run arbitrary code via (1) a crafted L...
Mandriva Linux Security Advisory : bind (MDVSA-2010:253)
Multiple vulnerabilities were discovered and corrected in bind : named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote...
Design/Logic Flaw
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
CVE-2010-0218
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
CVE-2010-0218
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
CVE-2010-0218
CVE-2010-0218 affects ISC BIND 9.7.2 through 9.7.2-P1, where an incorrect ACL allows RD (Recursion Desired) queries to access the cache, enabling remote disclosure of potentially sensitive information via DNS queries. The issue arises from misconfigured access control on the cache. Some connected...
CVE-2010-0218
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
Microsoft Windows SMTP服务可预测DNS查询ID漏洞（MS10-024）
BUGTRAQ ID: 39908 CVE ID: CVE-2010-1689 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的SMTP服务所生成的DNS查询中transaction ID字段值是可预测的： /----- 4FB5530C 4FB5530C loc4FB5530C: 4FB5530C mov esi+3Ch, eax 4FB5530F mov eax, ebp+arg8 4FB55312 mov ecx, ushort gwTransactionId 4FB55318 inc word ptr ushort...
DNS Query Failed
Binary data 5499.prm...
DNS Generic Query Detection
Binary data 5497.prm...
CVE-2010-0644
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for th...
Penetration in the end we should scan what is useful information-vulnerability warning-the black bar safety net
"T． S． T"the Information Security Team'blog If the penetration we need to scan what information? Then the statement could be more, but the routine will scan the following information: 1. The target on the network host IP address 2. The host system can access the UDP or TCP port 3. On the target...
Mandriva Update for bind MDKSA-2007:030 (bind)
Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDKSA-2007:030 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mandriva Update for bind MDKSA-2007:030 (bind)
Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDKSA-2007:030 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Ubuntu Update for bind9 vulnerabilities USN-418-1
Ubuntu Update for Linux kernel vulnerabilities USN-418-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4181.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerabilities USN-418-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
SuSE Update for bind, bind9 SUSE-SA:2007:047
Check for the Version of bind, bind9 OpenVAS Vulnerability Test $Id: gbsuse2007047.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for bind, bind9 SUSE-SA:2007:047 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
DEBIAN-CVE-2008-5277
PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service daemon crash via a CH HINFO query...
Microsoft Software Update DNS Query Detection
Binary data 4722.prm...