2616 matches found
[SECURITY] Fedora 15 Update: bind-9.8.0-5.P2.fc15
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
Nmap NSE net: dns-recursion
Checks if a DNS server allows queries for third-party names. It is expected that recursion will be enabled on your own internal nameservers. OpenVAS Vulnerability Test $Id: gbnmapdnsrecursionnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Felix Groebert...
Nmap NSE net: asn-query
Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru team-cymru.org using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries conta...
Nmap NSE net: dns-fuzz
This script launches a DNS fuzzing attack against any DNS server. The script induces errors into randomly generated but valid DNS packets. The packet template that we use includes one uncompressed and one compressed name. Use the 'dns-fuzz.timelimit' argument to control how long the fuzzing lasts...
Nmap NSE net: dns-zone-transfer
Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...
Nmap NSE net: dns-random-txid
Checks a DNS server for the predictable-TXID DNS recursion vulnerability. Predictable TXID values can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying txidtest.dns-oarc.net see https://www.dns- oarc.net/oarc/services/txidtest. Be aware that a...
Nmap NSE net: dns-random-srcport
Checks a DNS server for the predictable-port recursion vulnerability. Predictable source ports can make a DNS server vulnerable to cache poisoning attacks see CVE-2008-1447. The script works by querying porttest.dns-oarc.net see https://www.dns- oarc.net/oarc/services/porttest. Be aware that any...
bind97 security update
CentOS Errata and Security Advisory CESA-2011:0845 Updated bind and bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring Syst...
Unbound DNS server DoS
DoS against DNSSEC signed zone...
BIND -- Large RRSIG RRsets and Negative Caching DoS
ISC reports: A BIND 9 DNS server set up to be a caching resolver is vulnerable to a user querying a domain with very large resource record sets RRSets when trying to negatively cache a response. This can cause the BIND 9 DNS server named process to crash...
Debian Security Advisory DSA 2208-2 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2208-2. OpenVAS Vulnerability Test $Id: deb22082.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2208-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian Security Advisory DSA 2208-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2208-1. OpenVAS Vulnerability Test $Id: deb22081.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2208-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2208-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-2208-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)
Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...
openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)
Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...
[SECURITY] [DSA 2208-2] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2208-2 [email protected] http://www.debian.org/security/ Florian Weimer March 30, 2011 http://www.debian.org/security/faq -...
Debian DSA-2208-1 : bind9 - denial of service
It was discovered that BIND, a DNS server, contains a race condition when processing zones updates in an authoritative server, either through dynamic DNS updates or incremental zone transfer IXFR. Such an update while processing a query could result in deadlock and denial of service. CVE-2011-041...
[SECURITY] [DSA 2208-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2208-1 [email protected] http://www.debian.org/security/ Florian Weimer March 30, 2011 http://www.debian.org/security/faq -...
