DSA-1605-1 glibc - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS spoofing and cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. At this time, it is not possible to implement the recommended...

Debian Security Advisory DSA 146-1 (dietlibc)

The remote host is missing an update to dietlibc announced via advisory DSA 146-1. OpenVAS Vulnerability Test $Id: deb1461.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 146-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Fedora 7 : c-ares-1.4.0-1.fc7 (2007-0724)

There is a vulnerability in c-ares 1.4.0, caused by predictable DNS 'Transaction ID' field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed. http://www.vuxml.org/freebsd/70ae62b0-16b0-11dc-b803-0016179b2dd5.html Note that...

GLSA-200708-06 : Net::DNS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-06 Net::DNS: Multiple vulnerabilities hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless...

CVE-2007-3377

Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable...

CVE-2007-1030

Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service infinite loop via a DNS response containing a label pointer that references its own offset...

CVE-2006-5901

CVE-2006-5901 affects Hawking Technology wireless router WR254-CA. The entry notes the device uses a hardcoded IP address among DNS server addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at that hardcoded address....

[SA15472] Cisco Various Products Compressed DNS Messages Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

dhcp security update

CentOS Errata and Security Advisory CESA-2005:212-01 An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC...

CVE-2004-0150

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS...

ISC BIND DNS Query ID Field Prediction Cache Poisoning (deprecated)

Binary data 4578.prm...

[Full-Disclosure] EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service

Symantec Multiple Firewall DNS Response Denial-of-Service Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet...

Multiple Symantec firewall products fail to properly process DNS response packets

Overview There is a vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted Domain Name Service DNS response packet could allow an unauthenticated, remote attacker to cause a denial of service condition. Description Symantec offers a suite of corporat...

ISC BIND < 4.9.11 stub resolver (libresolv.a) DNS Response Overflow

The remote BIND 4.x server, according to its version number, is vulnerable to a buffer overflow in the DNS stub resolver library. An attacker might use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid11857;...

CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Content Service Switch 11000 Series DNS Negative Cache of Information Denial-of-Service Vulnerability =============================================================================== Revision Numeral 1.0 For Public Releas...

Sendmail buffer overflow fixed (NEW)

The sendmail packages in Slackware 8.0, 8.1, and 9.0 have been patched to fix a security problem. Note that this vulnerablity is NOT the same one that was announced on March 3rd and requires a new fix. All sites running sendmail should upgrade. More information on the problem can be found here:...

CVE-2003-0011

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service blocked traffic to DNS servers via a certain type of incoming DNS request that is not properly handled...

MS03-009: Microsoft ISA Server DNS - Denial Of Service (331065)

A vulnerability in Microsoft ISA Server 2000 allows an attacker to cause a denial of service in DNS services by sending a specially crafted DNS request packet. Note that, to be vulnerable, the ISA Server must be manually configured to publish an internal DNS server, which it does not do by defaul...