2639 matches found
ISC DHCP Server supersede_lease()远程拒绝服务漏洞
ISC DHCP是一款动态主机配置协议服务器软件。 ISC DHCP服务器在处理畸形请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击，导致DHCP服务器崩溃。 ISC DHCP软件memory.c中的supersedelease函数在处理DHCPOFFER报文中的选项时存在问题，远程攻击者可以通过一个32字节长的客户端标志选项字段导致服务器崩溃。 ISC DHCPD 2.x ISC DHCP 3.x版本的软件不受此漏洞影响，请到厂商的网站下载： http://www.isc.org/products/DHCP/...
OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit
No description provided by source. / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to...
ISC BIND多个拒绝服务漏洞
BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND的实现上存在多个拒绝服务漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 BIND在处理SIG查询时存在断言错误。如果返回了多于一个的SIGcovered RRset的话，就会导致递归服务器崩溃；或者对于权威服务器，如果名称服务器服务于RFC 2535 DNSSEC区且被查询了有多个SIGcovered RRset的SIG记录（如zone apex），则在创建响应的时候也会触发类似的错误。...
BIND: Denial of service
Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Queries for SIG records will cause an assertion error if more than one SIG RRset is returned. Additionally, an INSIST failure can be triggered by sending multiple recursive...
SOL6612 - BIND 9: Multiple DoS vulnerabilities VU#697164 and VU#915404
This security advisory describes multiple BIND 9 denial of service vulnerabilities. For information about this advisory, refer to the Internet Systems Consortium website at the following location: F5 Networks Product Development is tracking this issue as ID 314714 formerly CR68956 and ID 264730...
ISC BIND 9 Multiple Remote DoS
The version of BIND installed on the remote host suggests that it suffers from multiple denial of service vulnerabilities that could be triggered by either by sending a large volume of recursive queries or queries for SIG records where there are multiple SIGcovered RRsets. Note that Nessus obtain...
BIND vulnerable to an INSIST failure via sending of multiple recursive queries
Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. A flaw exists in the...
CVE-2006-3122
The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...
CVE-2006-3122
The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...
CVE-2006-3122
The CVE-2006-3122 entry concerns ISC DHCP (dhcpd) 2.0pl5. The vulnerability is in the supersede_lease function (memory.c): processing a DHCPDISCOVER with a 32-byte client-identifier causes the packet to be interpreted as a corrupt uid, making the server exit with a denial-of-service condition. Th...
CVE-2006-3122
The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...
ISC DHCP Server supersede_lease() Function DHCPDISCOVER Packet DoS
The ISC DHCP server running on the remote host is affected by a denial of service vulnerability in the supersedelease function within file memory.c due to improper handling of DHCPDISCOVER packets that have a client-identifier option that is exactly 32 bytes long. An unauthenticated, remote...
Important: Red Hat Bug Fix Advisory: bind bug fix update
Updated bind packages are available. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. The bind package provides a DNS server named, which resolves host names to IP addresses, and tools for control and verification of the DNS server. The bind-libs...
Buffer overflow
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack...
CVE-2006-2492
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack...
CVE-2006-2492
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack. Recent...
CVE-2006-2073
Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite...
Code injection
Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite...
