BIND 9.x - Remote DNS Cache Poisoning (Python)

BIND 9.x - Remote DNS Cache Poisoning Python from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

BIND 9.x - Remote DNS Cache Poisoning

from scapy import import random Copyright C 2008 Julien Desfossez http://www.solisproject.net/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, o...

DNS Server Source Port 53 Query Usage

Binary data 4601.prm...

sdns-remote-dos.pl.txt

!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...

Simple DNS Plus 5.04.1 - Remote Denial of Service

Simple DNS Plus 5.04.1 - Remote Denial of Service !/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $tran...

Simple DNS Plus 5.0/4.1 - Remote Denial of Service

!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...

Simple DNS Plus <= 5.0/4.1 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== Simple DNS Plus Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect...

Microsoft Windows DNS服务器缓存中毒漏洞（MS08-037）

BUGTRAQ ID: 30132 CVECAN ID: CVE-2008-1454 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的DNS服务实现上存在漏洞，在某些情况下Windows的DNS服务器可能接受远程服务器权威以外的响应。未经认证的远程攻击者可以向有漏洞系统的DNS请求回复恶意响应，从而使DNS缓存中毒，并将Internet通讯从合法位置重定向至其他位置。 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 20...

[SECURITY] Fedora 8 Update: bind-9.5.0-28.P1.fc8

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing &#40;953230&#41;

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...

Microsoft Windows DNS Server Cache Poisoning Vulnerability

Description Microsoft Windows DNS servers are prone to a vulnerability that lets attackers poison DNS caches. This occurs because the software fails to properly handle responses containing data outside of their authority. Successfully exploiting this issue allows remote attackers to poison DNS...

SuSE 10 Security Update : bind (ZYPP Patch Number 5274)

The IP number for the 'L' root DNS server changed. This patch updates the root.hint zone file to get the new IP number. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GLSA-200806-01 : mtr: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200806-01 mtr: Stack-based buffer overflow Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact : A remote attacker could use a...

mtr: Stack-based buffer overflow

Background mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. Description Adam Zabrocki reported a boundary error within the splitredraw function in the file split.c, possibly leading to a stack-based buffer overflow. Impact A remote attack...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

mtr &#40;multiprotocol traceroute&#41; buffer overflow

Buffer overflow on DNS server response parsing...

[SECURITY] Fedora 8 Update: pdns-recursor-3.1.5-1.fc8

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 7 Update: pdns-recursor-3.1.5-1.fc7

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

CVE-2008-1654

Interaction error between Adobe Flash and multiple Universal Plug and Play UPnP services allow remote attackers to perform Cross-Site Request Forgery CSRF style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primar...