CVE-2008-4163

Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...

CVE-2008-4163

CVE-2008-4163 affects ISC BIND 9 for Windows: 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1. Described as an unspecified vulnerability that allows remote attackers to cause a denial of service by terminating the UDP client handler, via unknown vectors. Multiple connected sources (Red Hat, Ubuntu, Deb...

CVE-2008-4163

Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...

ISC BIND 9 for Windows UDP Client Handler Remote DoS

According to its version number, the remote installation of BIND suffers from a vulnerability in which the UDP client handler can be shutdown, which in turn causes the server to stop responding to UDP queries. Note that this issue only exists in the Windows code of BIND 9.5.0-P2-W1 / 9.4.2-P2-W1 ...

FreeBSD Ports: bind

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

BIND: Cache poisoning

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Dan Kaminsky of IOActive has reported a weakness in the DNS protocol related to insufficient randomness of DNS transaction IDs and query source ports. Impact An attacker could...

Important: Red Hat Security Advisory: bind security update

Updated bind packages that help mitigate DNS spoofing attacks are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 10th July 2008 We have updated the Enterprise Linux 5 packages in this advisory. The default and sample...

Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

Memory corruption

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

DEBIAN-CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

CVE-2008-0122 describes an off-by-one error in the inet_network function in libbind used by ISC BIND 9.4.2 and earlier. The vulnerability affects those BIND versions (and is used in libc on FreeBSD 6.2–7.0-PRERELEASE), enabling context-dependent attackers to trigger memory corruption that can cau...

SuSE 10 Security Update : bind (ZYPP Patch Number 2517)

A security problem was fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this security update. If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SOL8077 - BIND 8 vulnerability CVE-2007-2930

The NSIDSHUFFLEONLY and NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors...

SUSE Linux ISC BIND “named” GSS-TSIG请求远程拒绝服务漏洞

BUGTRAQ ID: 26076 SuSE Linux Enterprise Server是在企业环境中使用的开放源码计算平台。 GSS-TSIG是Microsoft Windows系统用于动态请求DNS更新的机制。当named接收到GSS-TSIG请求时，需要加载libgssapi库负责安全密钥交换。如果libgssapi无法正确初始化的话，就会终止正在运行的named进程。尤其是当在chroot环境中运行named的时候，libgssapi就会终止进程，因为无法访问机制配置文件。 Novell SUSE Linux Enterprise Server 10 Service Pack...

openSUSE 10 Security Update : bind (bind-2529)

A security problem was fixed in the ISC BIND nameserver version 9.3.4, these are addressed by this security update. If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...