Important: Red Hat Bug Fix Advisory: bind bug fix update

Updated bind packages are available. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. The bind package provides a DNS server named, which resolves host names to IP addresses, and tools for control and verification of the DNS server. The bind-libs...

[Full-disclosure] [TZO-042006] Insecure Auto-Update and File execution

Zango Adware - Insecure Auto-Update and File execution Reference : TZO-042006-Zango Author : Thierry Zoller Advisory : http://secdev.zoller.lu/research/zango.htm Shameless Plug : I would like to take the opportunity to invite you to the Security Conference known as "Hack.lu 2006" in the Grand-Duc...

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

Default configuration

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0988

CVE-2006-0988 : The default configuration of the DNS Server on Windows Server 2003/2000 and Microsoft DNS Server on Windows NT 4.0 permits recursive queries and reveals delegation information to arbitrary IPs, enabling remote attackers to cause a denial of service (traffic amplification) via spoo...

CVE-2006-0988: Undefined Security Weakness

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0304

Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...

CVE-2006-0304

Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...

CVE-2006-0304: Undefined Security Weakness

Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the DHCP options field...

MyDNS DNS server DoS

No description provided...

CVE-2006-0304

The CVE-2006-0304 issue affects Dual DHCP DNS Server 1.0, where a buffer overflow in the DHCP options field allows remote attackers to trigger a denial of service (application crash) and may enable arbitrary code execution. The vulnerability is rooted in improper handling of DHCP options leading ...

Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow

Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow source: https://www.securityfocus.com/bid/16298/info Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability. The vulnerability presents itself when the server handles excessive data through the DHCP options field...

CVE-2005-3781

Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."...

[SA17681] IPUpdate "memmcat" Buffer Overflow Vulnerability

TITLE: IPUpdate "memmcat" Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA17681 VERIFY ADVISORY: http://secunia.com/advisories/17681/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: IPUpdate 1.x http://secunia.com/product/6180/ DESCRIPTION: A vulnerability has been...

Squid proxy server DNS reply spoofing

Blind DNS server reply spoofing is possible...

DNS Server UDP Query Limitation

A DNS server is running on this port but it only answers to UDP requests. This means that TCP requests are blocked by a firewall. This configuration is not RFC-compliant. Contrary to common belief, TCP transport is not restricted to zone transfers AXFR : - answers bigger than 512 bytes are always...

USN-129-1: Squid vulnerability

It was discovered that Squid did not verify the validity of DNS server responses. When Squid is started, it opens a DNS client UDP port whose number is randomly assigned by the operating system. Unless your network firewall is configured to accept DNS responses only from known good nameservers,...

CVE-2003-1132

Vulnerability overview (CVE-2003-1132) : Cisco Content Service Switch (CSS) 11000/11500 DNS servers respond with NXDOMAIN (response code 3) when queried for a nonexistent AAAA record, instead of No Error (response code 0). This behavior can enable remote attackers to cause a denial of service by ...