106 matches found
ISC BIND 9 SRTT算法授权服务器选择安全漏洞
BUGTRAQ ID: 61774 BIND是一个应用非常广泛的DNS协议的实现。 ISC BIND 9内的SRTT算法实现中存在漏洞，理论上此漏洞可使攻击者手动降低递归服务器与授权服务器相关联的SRTT值，从而影响特定授权服务器从NS资源记录集值内确定要查询的域服务器。SRTT选择不仅影响授权服务器，也影响递归或授权混合服务器。攻击者可利用此漏洞执行DNS相关的攻击，例如DNS缓存投毒。 0 ISC BIND 9.x 厂商补丁： ISC --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
ISC BIND 9 Assertion Error Resource Record RDATA Query Parsing Remote DoS
Binary data 6808.prm...
ISC BIND 9 DNS RDATA Handling DoS
Binary data 6809.prm...
ISC BIND 9 DNS64 Handling DoS
Binary data 6810.prm...
ISC BIND 9 libdns Regular Expressions Handling DoS
Binary data 6811.prm...
ISC BIND 9 Cache Update Policy Deleted Domain Name Resolving Weakness
Binary data 6805.prm...
BIND 9 DNS Server Dynamic Update Denial of Service - High Confidnce
ISC BIND 9 contains a vulnerability that may allow a remote attacker to create a denial-of-service condition. The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. It includes support for dynamic DNS updates. BIND 9 can cra...
ISC BIND 9 DNS64 远程拒绝服务漏洞
BUGTRAQ ID: 57556 CVECAN ID: CVE-2012-5689 BIND是一个应用非常广泛的DNS协议的实现。 ISC BIND 9.8.x、9.9.x在某些配置中，DNS64的响应策略区域缺少AAAA重写规则，远程攻击者通过AAAA记录查询，可造成拒绝服务（断言失败并退出指定程序）。 0 ISC BIND 9.9.x ISC BIND 9.8.x 临时解决方法： 2013年1月24日厂商已经发布beta版本，修复了此漏洞。如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 确保RPZ包含每个A重写规则的AAAA重写规则。 厂商补丁： IS...
ISC BIND 9 DNS64 REQUIRE断言失败拒绝服务漏洞
BUGTRAQ ID: 56817 CVECAN ID: CVE-2012-5688 BIND是一个应用非常广泛的DNS协议的实现。 ISC BIND 9.8.0及更高版本支持 DNS64 IPv6转换机制，如果启用了dns64配置状态，BIND 9域名服务器在解析特制的请求时，会触发REQUIRE断言失败，造成服务器崩溃。此漏洞可被远程利用，9.8.0之前版本、不启用DNS64时不受此漏洞的影响。 0 ISC BIND 9.9.0-9.9.2 ISC BIND 9.8.0-9.8.4 临时解决方法： 对于启用了DNS64的BIND...
ISC BIND 9 DNS64 Handling DoS
According to its self-reported version number, the remote installation of BIND can be forced to crash via maliciously crafted DNS requests. Note that this vulnerability only affects installs using the 'dns64' configuration option. Further note that Nessus has only relied on the version itself and...
CVE-2012-4244
ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for a long resource record...
FreeBSD Ports: FreeBSD
The remote host is missing an update to the system as announced in the referenced advisory. VID 0f020b7b-e033-11e1-90a2-000c299b62e1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 0f020b7b-e033-11e1-90a2-000c299b62e1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CVE-2012-3817
ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service assertion...
CVE-2012-1667
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service daemon crash or data corruption or obta...
ISC BIND 9 zero length rdata named vulnerability
Overview ISC BIND 9 named contains a vulnerability that could allow a attacker to cause named to terminate unexpectedly. Description According to ISC's security advisory:This problem was uncovered while testing with experimental DNS record types. It is possible to add records to BIND with null ze...
Code injection
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...
CVE-2012-1033
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...
CVE-2012-1033
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...
ISC BIND 9 resolver denial of service vulnerability
Overview ISC BIND 9 resolver contains a remote packet denial of service vulnerability after logging an error in query.c. Description According to ISC:An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers wit...