304 matches found
DNS Recursion Bandwidth Amplification - Denial of Service (PoC)
DNS Recursion Bandwidth Amplification - Denial of Service PoC !/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the A...
Security Best Practice: Protect Yourself against DNS Cache Poisoning
DNS cache poisoning occurs when false DNS records are injected into a DNS server's cache tables. Once the cache tables have been altered, a remote attacker may inspect, capture or corrupt any information exchanged between hosts on the network. By poisoning a DNS server, a remote attacker could, f...
Multiple DNS servers different security vulnerabilities
Multiple vulnerabilities were discovered with automated testing tool...
Multiple Zyxel P2000W wirieless Wi-Fi VoIP phones vulnerabilities
Information leak, external DNS servers access...
[Full-disclosure] Zyxel P2000W (Version1) VoIP Wifi phone multiple vulnerabilties
I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Zyxel PRODUCT: Zyxel P2000W Version 1 VOIP WI...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
CVE-2004-0836
Buffer overflow in the mysqlrealconnect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length hlength...
Incorrect NXDOMAIN responses from AAAA queries could cause denial-of-service conditions
Overview Some DNS servers respond with an inappropriate error message if queried for nonexistent AAAA records, which can lead to possible denial of service. Description Some DNS servers respond with a "Name Error" response code NXDOMAIN, RCODE 3 instead of "No Error" RCODE 0 when queried for a...
ISS Security Advisory: Multiple Remote Vulnerabilities in BIND4 and BIND8
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief November 12, 2002 Multiple Remote Vulnerabilities in BIND4 and BIND8 Synopsis: ISS X-Force has discovered several serious vulnerabilities in the Berkeley Internet Name Domain Server BIND. BIND is the most common...
CVE-2002-0910
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...
CVE-2002-0684
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr...
CVE-2002-0684
Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr...
Advisory CA-2002-15 Denial-of-Service Vulnerability in ISC BIND 9
CERT Advisory CA-2002-15 Denial-of-Service Vulnerability in ISC BIND 9 Original release date: June 04, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Domain Name System DNS servers running ISC BIND 9 prior to 9.2.1 Because...
CVE-1999-1222
CVE-1999-1222 affects Netbt.sys on Windows NT 4.0. A remote DNS server can cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS hostname lookup. Impact: availability degradation/partial DoS as described; exploitation details are not provided in the supplied documents...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
FreeBSD-SA-01:18.bind
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:18 Security Advisory FreeBSD, Inc. Topic: BIND remotely exploitable buffer overflow Category: core, ports Module: bind Announced: 2001-01-31 Credits: COVERT Labs Claudio...
ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery
ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists ...
CVE-1999-0275
CVE-1999-0275 denotes a DoS in Windows NT DNS servers caused by flooding UDP/port 53 with an excessive number of characters in requests. Affected component: Windows NT DNS service; root cause: character-saturated requests overwhelm the DNS server, leading to service disruption. Documented impact:...