2136 matches found
Microsoft WIndows DNS Server DoS
Crash on request processing...
Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)
This host is missing an important security update according to Microsoft Bulletin MS12-017. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS12-017: Vulnerability in DNS Server Could Allow Denial of Service (2647170)
The DNS server installed on the remote host does not properly handle objects in memory when looking up the resource record of a domain. By sending a specially crafted DNS query, an attacker may be able to exploit this flaw and cause the DNS server on the remote host to stop responding and...
Microsoft Windows DNS Server (CVE-2012-0006) Remote Denial of Service Vulnerability
Description The Microsoft Windows DNS Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the DNS server service to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...
MS12-017: Vulnerability in DNS Server could allow denial of service: March 13, 2012
None None...
MaraDNS: Denial of service
Background MaraDNS is a proxy DNS server with permanent caching. Description MaraDNS does not properly randomize hash functions to protect against hash collision attacks. Impact A remote attacker could send many specially crafted DNS recursive queries, possibly resulting in a Denial of Service...
CVE-2012-1194
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a...
Code injection
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a...
CVE-2012-1194
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a...
CVE-2012-1194
The CVE-2012-1194 issue affects Microsoft Windows Server 2008 DNS Server: the resolver overwrites cached NS names and TTLs while handling A record responses, enabling a ghost domain names attack that can keep revoked domains resolvable. Affected product/version is Windows Server 2008 (before R2) ...
ISC BIND Zero Length RDATA Denial of Service - Ver2 (CVE-2012-1667)
A denial of service vulnerability has been reported in ISC BIND. The vulnerability is due to improper handling of zero-length RDATA in certain record types. A remote attacker can exploit this issue by loading a specially crafted file to the DNS server. Successful exploitation would cause the serv...
Debian: Security Advisory (DSA-2347-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2347-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2347-1. OpenVAS Vulnerability Test $Id: deb23471.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2347-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
DNS and DNSSEC Fuzzer
This module will connect to a DNS server and perform DNS and DNSSEC protocol-level fuzzing. Note that this module may inadvertently crash the target server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...
CentOS 4 : bind (CESA-2011:1496)
"Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
bind security update
CentOS Errata and Security Advisory CESA-2011:1496 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base scor...
[SECURITY] Fedora 14 Update: bind-9.7.4-2.P1.fc14
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
bind (important)
specially crafted DNS queries could crash the bind name server CVE-2011-4313...
MaraDNS: Arbitrary code execution
Background MaraDNS is a proxy DNS server with permanent caching. Description A long DNS hostname with a large number of labels could trigger a buffer overflow in the compressadddlabelpoints function of dns/Compress.c. Impact A remote unauthenticated attacker could execute arbitrary code or cause ...