bind (important)

specially crafted DNS queries could crash the bind name server CVE-2011-4313...

bind DNS server DoS

Crash on packet parsing...

MaraDNS: Arbitrary code execution

Background MaraDNS is a proxy DNS server with permanent caching. Description A long DNS hostname with a large number of labels could trigger a buffer overflow in the compressadddlabelpoints function of dns/Compress.c. Impact A remote unauthenticated attacker could execute arbitrary code or cause ...

[SECURITY] Fedora 16 Update: bind-9.8.1-4.P1.fc16

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

RedHat Update for bind RHSA-2011:1458-01

Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2011:1458-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for squid FEDORA-2011-15256

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2011-15256 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Patches Released for BIND Denial-of-service Vulnerability

Patches Released for BIND Denial-of-service Vulnerability There's a new vulnerability in the popular BIND name server software that is causing various versions of the application to crash unexpectedly after logging a certain kind of error. The Internet Systems Consortium ISC, an organization that...

Important: Red Hat Security Advisory: bind security update

Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Debian DSA-2347-1 : bind9 - improper assert

It was discovered that BIND, a DNS server, crashes while processing certain sequences of recursive DNS queries, leading to a denial of service. Authoritative-only server configurations are not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 2347-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2347-1 [email protected] http://www.debian.org/security/ Florian Weimer November 16, 2011 http://www.debian.org/security/faq -...

DSA-2347-1 bind9 - improper assert

Bulletin has no description...

Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)

This host is missing a critical security update according to Microsoft Bulletin MS11-058. OpenVAS Vulnerability Test $Id: secpodms11-058.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows DNS Server Remote Code Execution Vulnerability 2562485 Authors: Veerendra G.G Copyright: Copyright c 2011...

CVE-2011-1966

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...

CVE-2011-1970

The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which allows remote attackers to cause a denial of service service outage via a query for a nonexistent domain, aka "DNS Uninitialized Memory Corruption...

Design/Logic Flaw

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...

CVE-2011-1966

The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing, which allows remote attackers to execute arbitrary code via a crafted query, aka "DNS NAPTR Query Vulnerability."...

CVE-2011-1966

The CVE-2011-1966 issue affects Microsoft Windows DNS Server on Windows Server 2008 SP2, R2, and R2 SP1, where the DNS server mishandles NAPTR queries that trigger recursive processing. The root cause is a memory corruption vulnerability exploitable via specially crafted NAPTR queries, which can ...

Microsoft Windows DNS Server NAPTR查询远程代码执行漏洞

Bugtraq ID: 49012 CVE ID：CVE-2011-1966 Microsoft Windows是一款流行的操作系统。 Windows DNS server处理NAPTR Name Authority Pointer资源记录的查询存在错误，允许攻击者对设置为非权威DNS服务器进行任意代码执行攻击。...

Microsoft Windows DNS Server未初始化内存远程拒绝服务漏洞

Bugtraq ID: 49019 CVE ID：CVE-2011-1970 Microsoft Windows是一款流行的操作系统。 Windows DNS服务处理一个查询不存在域的请求时存在错误，不正确处理未初始化的内存对象可导致DNS服务停止响应，造成拒绝服务攻击。 Microsoft Windows Server 2008 Standard Edition SP2 Microsoft Windows Server 2008 Standard Edition Release Candidate Microsoft Windows Server 2008 Standard Editi...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...