Lucene search
+L

2890 matches found

OSV
OSV
•added 2012/02/08 8:55 p.m.•21 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

6.2AI score
SaveExploits0References11
NVD
NVD
•added 2012/02/08 8:55 p.m.•28 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

5CVSS8.3AI score0.13066EPSS
SaveExploits1References11
Prion
Prion
•added 2012/02/08 8:55 p.m.•41 views

Code injection

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

5CVSS6.8AI score0.13066EPSS
SaveExploits1References11Affected Software1
Cvelist
Cvelist
•added 2012/02/08 8:00 p.m.•40 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

8.3AI score0.13066EPSS
SaveExploits1References11
Mend
Mend
•added 2012/02/08 8:00 p.m.•4 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

6.9CVSS0.13066EPSS
SaveExploits1References14
CVE
CVE
•added 2012/02/08 8:00 p.m.•268 views

CVE-2012-1033

The CVE-2012-1033 issue affects ISC BIND 9 up to 9.8.1-P1, where the resolver overwrites cached NS records and TTLs during handling of an A query response. This can allow remote attackers to trigger continued resolvability of revoked domain names via a ghost domain names attack. Public Nessus/IDS...

5CVSS7.1AI score0.13066EPSS
SaveExploits1References11Affected Software1
Debian CVE
Debian CVE
•added 2012/02/08 8:00 p.m.•41 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

5CVSS7AI score0.13066EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/08 12:00 a.m.•6 views

CVE-2012-1033: Undefined Security Weakness

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

5CVSS7.8AI score0.13066EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2012/02/08 12:00 a.m.•37 views

CVE-2012-1033

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

5CVSS6.9AI score0.13066EPSS
SaveExploits1References3
CERT
CERT
•added 2012/02/08 12:00 a.m.•44 views

ISC BIND 9 resolver cache vulnerability

Overview ISC BIND 9 resolver contains a vulnerability that could allow a attacker to keep a domain name in the cache even after it has been deleted from registration. Description According to ISC:I SC has been notified by Haixin Duan a professor at Tsinghua University in Beijing China, who is...

5CVSS8.2AI score0.13066EPSS
SaveExploits1References2
Fedora
Fedora
•added 2012/01/22 5:25 a.m.•50 views

[SECURITY] Fedora 16 Update: dhcp-4.2.3-5.P2.fc16

DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own network configuration information IP address, subnetmask, broadcast address, etc. from a DHCP server. The overall purpose of DHCP is to make it easier to administer a large...

6.1CVSS6.7AI score0.15219EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/01/16 12:00 a.m.•41 views

FreeBSD : isc-dhcp-server -- DoS in DHCPv6 (1800886c-3dde-11e1-89b4-001ec9578670)

ISC reports : Due to improper handling of a DHCPv6 lease structure, ISC DHCP servers that are serving IPv6 address pools AND using Dynamic DNS can encounter a segmentation fault error while updating lease status under certain conditions. The potential exists for this condition to be intentionally...

6.1CVSS6.6AI score0.03414EPSS
SaveExploits0References3
NVD
NVD
•added 2012/01/15 3:55 a.m.•25 views

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

6.1CVSS6.4AI score0.03414EPSS
SaveExploits0References4
OSV
OSV
•added 2012/01/15 3:55 a.m.•15 views

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

6.7AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2012/01/15 2:00 a.m.•45 views

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

6.2AI score0.03414EPSS
SaveExploits0References4
Mend
Mend
•added 2012/01/15 2:00 a.m.•1 views

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

7.1CVSS0.03414EPSS
SaveExploits0References4
CVE
CVE
•added 2012/01/15 2:00 a.m.•81 views

CVE-2011-4868

ISC DHCP (dhcpd) before 4.2.3-P2 is affected when using Dynamic DNS with IPv6. The issue lies in the logging/DDNS handling of the DHCPv6 lease structure during lease-status updates, which can trigger a NULL pointer dereference and crash the daemon (denial of service). Exploitation details are not...

6.1CVSS6.6AI score0.03414EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2012/01/15 2:00 a.m.•51 views

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

6.1CVSS6.6AI score0.03414EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2012/01/15 12:00 a.m.•5 views

PT-2012-1167

Name of the Vulnerable Software and Affected Versions dhcp versions prior to 4.2.4 p2 ISC DHCP versions prior to 4.2.3-P2 Description The issue concerns the dhcp package in Gentoo Linux and ISC DHCP, where multiple vulnerabilities can be exploited to disrupt the availability of protected...

7.8CVSS0.03414EPSS
SaveExploits0References26
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/01/15 12:00 a.m.•3 views

CVE-2011-4868: Undefined Security Weakness

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

6.1CVSS6.6AI score0.03414EPSS
SaveExploits0References2
Rows per page
Query Builder