EUVD-2007-3367

Malware in sbrugna...

EUVD-2007-3145

Malware in sbrugna...

CVE-2015-0800: Exposure of Sensitive Information to an Unauthorized Actor

The PRNG implementation in the DNS resolver in Mozilla Firefox aka Fennec before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to...

Microsoft Windows SMTP Service DNS Response Spoofing (MS10-024; CVE-2010-1690)

Microsoft Windows Simple Mail Transfer Protocol SMTP service is installed as part of Internet Information Services IIS to transfer email messages. SMTP handles how a given e-mail is transported and delivered across the Internet to the destination server. A spoofing vulnerability has been reported...

CVE-2010-1690

The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and...

CVE-2010-1689

The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and...

CVE-2010-0362: Undefined Security Weakness

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses...

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1619-2 [email protected] http://www.debian.org/security/ Devin Carraway September 22, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1619-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

------------------------------------------------------------------------ Debian Security Advisory DSA-1619-1 [email protected] http://www.debian.org/security/ Devin Carraway July 27, 2008 http://www.debian.org/security/faq -...

DSA-1619-1 python-dns - DNS response spoofing

Bulletin has no description...

CVE-2008-0087: Use of Insufficiently Random Values

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses...

CVE-2007-3377

Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...

CVE-2007-3152: Undefined Security Weakness

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value...

CVE-2007-3153: Undefined Security Weakness

The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...