CVE-2004-0765

The certTestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name FQDN, which allows remote attackers to spoof trusted certificates...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:051)

In versions of the xchat IRC client prior to version 1.8.9, xchat does not filter the response from an IRC server when a /dns query is executed. xchat resolves hostnames by passing the configured resolver and hostname to a shell, so an IRC server may return a malicious response formatted so that...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

PT-2004-1707 · D Link · D-Link Di-624 +2

Name of the Vulnerable Software and Affected Versions: D-Link DI-614+ SOHO router version 2.30 D-Link DI-704 SOHO router version 2.60B2 D-Link DI-624 affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote...

ISC DHCP buffer overflow

Buffer overflow on oversized hostname in DHCP query, if hostname is splitted to few attributes...

CVE-2004-0460

Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...

mozilla -- hostname spoofing bug

When processing URIs that contain an unqualified host name-- specifically, a domain name of only one component-- Mozilla will perform matching against the first component of the domain name in SSL certificates. In other words, in some situations, a certificate issued to "www.example.com" will be...

CVE-2003-1377

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...

CVE-2003-0976

NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...

sipD DoS

Because of insufficient check of gethostbynamer results is's possible to crash service with unresolvable hostname...

CVE-2003-0976

NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...

DEBIAN-CVE-2003-0832

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

WinShadow buffer overflow

Buffer overflow on oversized hostname, DoS...

CVE-2003-0832

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

Solaris sadmind Command Execution

This exploit targets a weakness in the default security settings of the Sun Solstice AdminSuite distributed system administration daemon sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include Solaris 2....

WebLogic Crafted GET Request Hostname Disclosure

The remote WebLogic server discloses its NetBIOS host name when it is issued a request generating a redirection. An attacker may use this information to better prepare other attacks against this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Mozilla/Netscape crossite scripting

If dot is present in the end of hostname Mozilla teat part of the path as a domain...

Poptop Negative Read Overflow

This is an exploit for the Poptop negative read overflow. This will work against versions prior to 1.1.3-b3 and 1.1.3-20030409, but I currently do not have a good way to detect Poptop versions. The server will by default only allow 4 concurrent manager processes what we run our code in, so you...

CVE-2002-0511

The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...

FreeBSD 2.x lpd Long DNS Hostname Overflow

The remote lpd daemon seems to be vulnerable to a buffer overflow when a host with a too long DNS host name connects to it. Nessus solely relied on the version of the remote operating system to issue an alert, so this might be a false positive. C Tenable Network Security, Inc. This is a check for...