ISC BIND DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability

ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

DNSSEC Usage Expands

According to research released by Infoblox and The Measurement Factory, there has been a dramatic increase in the percentage of external name servers that are open to recursion. The study put the latest figure at 79.6 percent, a 27 percent increase from 2007. The number of DNSSEC signed zones...

One Year Later: Dan Kaminsky on DNS Security Problems

From SearchSecurity Network security researcher Dan Kaminsky has had a year to reflect on the impact of the cache poisoning vulnerability he discovered in the Domain Name System DNS. Kaminsky revealed during last year’s Black Hat Briefings a technique that made it relatively easy to exploit the b...

Mandriva Linux Security Advisory : bind (MDVSA-2009:002)

A flaw was found in how BIND checked the return value of the OpenSSL DSAdoverify function. On systems that use DNSSEC, a malicious zone could present a malformed DSA certificate and bypass proper certificate validation, which would allow for spoofing attacks CVE-2009-0025. The updated packages ha...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : bind9 vulnerability (USN-706-1)

It was discovered that Bind did not properly perform signature verification. When DNSSEC with DSA signatures are in use, a remote attacker could exploit this to bypass signature validation to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web...

Ubuntu Update for bind9 vulnerabilities USN-418-1

Ubuntu Update for Linux kernel vulnerabilities USN-418-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4181.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerabilities USN-418-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-418-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200903-14 (bind)

The remote host is missing updates announced in advisory GLSA 200903-14. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200903-14 (bind)

The remote host is missing updates announced in advisory GLSA 200903-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

BIND: Incorrect signature verification

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description BIND does not properly check the return value from the OpenSSL functions to verify DSA CVE-2009-0025 and RSA CVE-2009-0265 certificates. Impact A remote attacker could bypass...

Fedora Update for dnssec-tools FEDORA-2008-1758

Check for the Version of dnssec-tools OpenVAS Vulnerability Test Fedora Update for dnssec-tools FEDORA-2008-1758 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for dnssec-tools FEDORA-2008-1771

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for dnssec-tools FEDORA-2008-1771

Check for the Version of dnssec-tools OpenVAS Vulnerability Test Fedora Update for dnssec-tools FEDORA-2008-1771 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for dnssec-tools FEDORA-2008-1758

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 3 / 4 / 5 : bind (CESA-2009:0020)

Updated Bind packages to correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name...

SUSE: Security Advisory for bind (SUSE-SA:2009:005)

The remote host is missing updates announced in advisory SUSE-SA:2009:005. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

FreeBSD Security Advisory (FreeBSD-SA-09:04.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:04.bind.asc ADV FreeBSD-SA-09:04.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:04.bind.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-09:04.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:04.bind.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DNS Server DNSSEC Aware Resolver

The remote DNS resolver accepts DNSSEC options. This means that it may verify the authenticity of DNSSEC protected zones if it is configured to trust their keys. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35373; scriptversion"$Revision: 1.14 $";...

Debian DSA-1703-1 : bind9 - interpretation conflict

It was discovered that BIND, an implementation of the DNS protocol suite, does not properly check the result of an OpenSSL function which is used to verify DSA cryptographic signatures. As a result, incorrect DNS resource records in zones protected by DNSSEC could be accepted as genuine...