298 matches found
CVE-2008-4126
Technical details for CVE-2008-4126 are not provided in the connected documents; the initial description summarizes the issue but no vendor/version/context is given here. Monitor for updates.
CVE-2008-4100
GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the...
CVE-2008-4126
Removed by vendor...
Design/Logic Flaw
resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than...
ruby -- DNS spoofing vulnerability in resolv.rb
resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than...
Design/Logic Flaw
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...
CVE-2008-0331
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...
CVE-2008-0331
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...
[SECURITY] Fedora 7 Update: c-ares-1.4.0-1.fc7
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
DSA-1319-1 maradns
Bulletin has no description...
Design/Logic Flaw
Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...
CVE-2007-0193
FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attackers to tunnel traffic via DNS requests for hosts that should not be accessible before authentication...
Authentication flaw
FON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which allows remote attackers to tunnel traffic via DNS requests for hosts that should not be accessible before authentication...
CVE-2004-1503
Integer overflow in the InitialDirContext in Java Runtime Environment JRE 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service Java exception and failed DNS requests via a large number of DNS requests, which causes the xid variable to wrap around and becom...
CVE-2004-1503
Integer overflow in the InitialDirContext in Java Runtime Environment JRE 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service Java exception and failed DNS requests via a large number of DNS requests, which causes the xid variable to wrap around and becom...
SheerDNS 1.0 - Information Disclosure
SheerDNS 1.0 - Information Disclosure // source: https://www.securityfocus.com/bid/7336/info A vulnerability has been discovered in SheerDNS. Due to insufficient sanitization of DNS requests, an attacker may be able to view the contents of an arbitrary system directory or file. Information obtain...
CVE-2003-0011
Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service blocked traffic to DNS servers via a certain type of incoming DNS request that is not properly handled...
