Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

Debian Security Advisory DSA 196-1 (bind)

The remote host is missing an update to bind announced via advisory DSA 196-1. OpenVAS Vulnerability Test $Id: deb1961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 196-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 231-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 231-1. OpenVAS Vulnerability Test $Id: deb2311.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 231-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

Memory corruption

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

DEBIAN-CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

Off-by-one error in the inetnetwork function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted input that triggers memory corruption...

CVE-2008-0122

CVE-2008-0122 describes an off-by-one error in the inet_network function in libbind used by ISC BIND 9.4.2 and earlier. The vulnerability affects those BIND versions (and is used in libc on FreeBSD 6.2–7.0-PRERELEASE), enabling context-dependent attackers to trigger memory corruption that can cau...

SuSE 10 Security Update : bind (ZYPP Patch Number 2517)

A security problem was fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this security update. If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SOL8077 - BIND 8 vulnerability CVE-2007-2930

The NSIDSHUFFLEONLY and NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors...

SUSE Linux ISC BIND “named” GSS-TSIG请求远程拒绝服务漏洞

BUGTRAQ ID: 26076 SuSE Linux Enterprise Server是在企业环境中使用的开放源码计算平台。 GSS-TSIG是Microsoft Windows系统用于动态请求DNS更新的机制。当named接收到GSS-TSIG请求时，需要加载libgssapi库负责安全密钥交换。如果libgssapi无法正确初始化的话，就会终止正在运行的named进程。尤其是当在chroot环境中运行named的时候，libgssapi就会终止进程，因为无法访问机制配置文件。 Novell SUSE Linux Enterprise Server 10 Service Pack...

openSUSE 10 Security Update : bind (bind-2529)

A security problem was fixed in the ISC BIND nameserver version 9.3.4, these are addressed by this security update. If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

Default configuration

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

CVE-2007-5471 affects libgssapi before 0.6-13.7 used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP1. The library terminates on an initialization error, allowing remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. The issue probably affects othe...

CVE-2007-5365

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

Stack overflow

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...