2361 matches found
dns-random-srcport NSE Script
Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see . Be aware that any targets against which this script is run will be...
LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC
Exploit for multiple platform in category dos / poc ============================================================ LibSPF2 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC ============================================================ Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan...
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...
FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
FreeBSD Security Advisory (FreeBSD-SA-07:02.bind.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:02.bind.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Security Advisory (FreeBSD-SA-05:12.bind9.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:12.bind9.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PowerDNS Version Detection
The remote host is running PowerDNS, an open source DNS server. It was possible to extract the version number of the remote installation by sending a special DNS request for the text 'version.pdns' in the domain 'chaos'. C Tenable Network Security, Inc. include"compat.inc"; if description...
[SECURITY] Fedora 9 Update: pdns-recursor-3.1.7-2.fc9
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
DNS cache poisoning details leaked-vulnerability warning-the black bar safety net
Yesterday Mantasano on an article describing the Dan Kaminsky DNS name server attack details. The article was published a few minutes after that to be deleted. Although Dan Kaminsky have combined The vendor released a patch, but is still in the patch of the push phase, there are still a...
BIND 9.x - Remote DNS Cache Poisoning
from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, o...
BIND 9.x - Remote DNS Cache Poisoning (Python)
BIND 9.x - Remote DNS Cache Poisoning Python from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
DNS Server Source Port 53 Query Usage
Binary data 4601.prm...
sdns-remote-dos.pl.txt
!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...
Simple DNS Plus <= 5.0/4.1 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================================== Simple DNS Plus Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect...
Simple DNS Plus 5.0/4.1 - Remote Denial of Service
!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...
Simple DNS Plus 5.04.1 - Remote Denial of Service
Simple DNS Plus 5.04.1 - Remote Denial of Service !/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $tran...
Microsoft Windows DNS服务器缓存中毒漏洞（MS08-037）
BUGTRAQ ID: 30132 CVECAN ID: CVE-2008-1454 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的DNS服务实现上存在漏洞，在某些情况下Windows的DNS服务器可能接受远程服务器权威以外的响应。未经认证的远程攻击者可以向有漏洞系统的DNS请求回复恶意响应，从而使DNS缓存中毒，并将Internet通讯从合法位置重定向至其他位置。 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 20...
[SECURITY] Fedora 8 Update: bind-9.5.0-28.P1.fc8
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)
Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...