437 matches found
Microsoft Software Update DNS Query Detection
Binary data 4723.prm...
Mac Software Update DNS Query Detection
Binary data 4719.prm...
Mac Software Update DNS Query Detection
Binary data 4718.prm...
Mac Software Update DNS Query Detection
Binary data 4717.prm...
BIND 9.x - Remote DNS Cache Poisoning
/ Exploit for CVE-2008-1447 - Kaminsky DNS Cache Poisoning Attack Compilation: $ gcc -o kaminsky-attack kaminsky-attack.c dnet-config --libs -lm Dependency: libdnet aka libdumbnet-dev under Ubuntu Author: marc.bevand at rapid7 dot com / define BSDSOURCE include include include include include...
BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (c)
Exploit for multiple platform in category remote exploits ==================================================== BIND 9.x Remote DNS Cache Poisoning Flaw Exploit c ==================================================== / Exploit for CVE-2008-1447 - Kaminsky DNS Cache Poisoning Attack Compilation: $ g...
DNS cache poisoning details leaked-vulnerability warning-the black bar safety net
Yesterday Mantasano on an article describing the Dan Kaminsky DNS name server attack details. The article was published a few minutes after that to be deleted. Although Dan Kaminsky have combined The vendor released a patch, but is still in the patch of the push phase, there are still a...
Debian Security Advisory DSA 1342-2 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 1342-2. OpenVAS Vulnerability Test $Id: deb13422.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1342-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1254-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 1254-1. It was discovered that the Bind name server daemon is vulnerable to denial of service by triggering an assertion through a crafted DNS query. This only affects installations which use the DNSSEC extensions. OpenVAS...
Debian: Security Advisory (DSA-1254-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : bind,bind-devel,bind-utils (ZYPP Patch Number 3976)
The bind nameserver generated predicatable DNS query IDs. Remote attackers could use that to perform DNS poisoning attacks. CVE-2007-2926 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...
Ubuntu 6.06 LTS / 6.10 / 7.04 : bind9 vulnerability (USN-491-1)
A flaw was discovered in Bind's sequence number generator. A remote attacker could calculate future sequence numbers and send forged DNS query responses. This could lead to client connections being directed to attacker-controlled hosts, resulting in credential theft and other attacks. Note that...
SOL8077 - BIND 8 vulnerability CVE-2007-2930
The NSIDSHUFFLEONLY and NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors...
CVE-2007-2930
The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...
CVE-2007-2930
The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...
Code injection
The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...
CVE-2007-2930
The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...
CVE-2007-2930
CVE-2007-2930 affects ISC BIND 8 up to 8.4.7-P1, where the NSID_SHUFFLE_ONLY and NSID_USE_POOL PRNGs generate predictable DNS query IDs when the resolver sends outgoing queries (e.g., NOTIFY). This weakness enables remote attackers to poison DNS caches via unknown vectors. The advisory notes this...
ISC BIND < 8.4.7-P1 Outgoing Query Predictable DNS Query ID (deprecated)
Binary data 4195.prm...
GLSA-200708-06 : Net::DNS: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-06 Net::DNS: Multiple vulnerabilities hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless...