Squid proxy server DNS reply spoofing

Blind DNS server reply spoofing is possible...

DNS Server UDP Query Limitation

A DNS server is running on this port but it only answers to UDP requests. This means that TCP requests are blocked by a firewall. This configuration is not RFC-compliant. Contrary to common belief, TCP transport is not restricted to zone transfers AXFR : - answers bigger than 512 bytes are always...

USN-129-1: Squid vulnerability

It was discovered that Squid did not verify the validity of DNS server responses. When Squid is started, it opens a DNS client UDP port whose number is randomly assigned by the operating system. Unless your network firewall is configured to accept DNS responses only from known good nameservers,...

CVE-2003-1132

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

CVE-2003-1132

Vulnerability overview (CVE-2003-1132) : Cisco Content Service Switch (CSS) 11000/11500 DNS servers respond with NXDOMAIN (response code 3) when queried for a nonexistent AAAA record, instead of No Error (response code 0). This behavior can enable remote attackers to cause a denial of service by ...

dnsmasq < 2.21.0 Multiple Remote Vulnerabilities

The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...

USN-84-1: Squid vulnerabilities

When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...

Multiple Vendor DNS Response Flooding Denial Of Service

The remote DNS server is vulnerable to a denial of service attack because it replies to DNS responses. An attacker could exploit this vulnerability by spoofing a DNS packet so that it appears to come from 127.0.0.1 and make the remote DNS server enter into an infinite loop, therefore denying...

CVE-2004-0836

Buffer overflow in the mysqlrealconnect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length hlength...

Windows SMTP service buffer overflow

Buffer overflows during preconfigured DNS server reply analisys...

CVE-2002-1219

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...

CVE-2002-1219

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...

MySQL < 4.0.21 mysql_real_connect() Function Remote Overflow

The remote host is running a version of MySQL that is older than 4.0.21. MySQL is a database that runs on both Linux/BSD and Windows platforms. This version is vulnerable to a length overflow within it's mysqlrealconnect function. The overflow is due to an error in the processing of a return Doma...

DNS Server Detection

Binary data 1016.prm...

ISC BIND DNS Server Unsupported Version Detection

Binary data 1000.prm...

DNS Server Zone Transfer Allowed

Binary data 1017.prm...

Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)

A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...

Symantec Enterprise Firewall DNSD cache poisoning Vulnerability

Symantec Enterprise Firewall dnsd proxy, versions 8 and later, is vulnerable to cache poisoning attacks when acting as a caching nameserver. Is possible to inject false entries in its cache and make a false DNS server look like authoritative of a zone, when it is not. Once this information is...

Symantec Enterprise Firewall 7.0/8.0 - DNSD DNS Cache Poisoning

source: https://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the requested records. An attacker could exploit this vulnerability to...

Symantec Enterprise Firewall 7.08.0 - DNSD DNS Cache Poisoning

Symantec Enterprise Firewall 7.08.0 - DNSD DNS Cache Poisoning source: https://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the...