54 matches found
Apache Traffic Server Sensitive Information Disclosure Vulnerability
Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to bypass access restrictions to data via the server's negative cache poisoning ...
Denial Of Service (DoS)
ISC Bind is vulnerable to denial of service. An improper indication of a negative-cache record allows a remote attacker to cause the named daemon to crash via a crafted UPDATE request...
autofs security update
CentOS Errata and Security Advisory CESA-2015:2417 Updated autofs packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability...
bind: Remote denial of service against recursive servers via logging negative cache entry
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service assertion failure and named exit via unknown vectors related to recursive DNS...
bind: Remote denial of service against recursive servers via logging negative cache entry
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service assertion failure and named exit via unknown vectors related to recursive DNS...
ISC BIND named negative caching vulnerability
Overview ISC BIND contains a vulnerability in the processing of large RRSIG RRsets included in a negative cache response. Description According to ISC:DNS systems use negative caching to improve DNS response time. This will keep a DNS resolver from repeatedly looking up domains that do not exist...
Fedora 14 : sssd-1.5.7-1.fc14 (2011-5815)
Fri Apr 29 2011 Stephen Gallagher - 1.5.7-1 - Resolves: rhbz700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename - Wed Apr 20 2011 Stephen Gallagher - 1.5.6.1-1 - Re-add manpage translations - Wed Apr 20 2011 Stephen Gallagher - 1.5.6-1 - New...
ISC BIND 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
ISC BIND is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named
named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service daemon crash via a query for...
FreeBSD : bind8 negative cache poison attack (17)
The following package needs to be updated: bind %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgf04cc5cb2d0b11d8beaf000a95c4d922.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...
FreeBSD-SA-03:19.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:19.bind Security Advisory The FreeBSD Project Topic: bind8 negative cache poison attack Category: contrib Module: contribbind Announced: 2003-11-28 Credits:...
bind8 negative cache poison attack
A programming error in BIND 8 named can result in a DNS message being incorrectly cached as a negative response. As a result, an attacker may arrange for malicious DNS messages to be delivered to a target name server, and cause that name server to cache a negative response for some target domain...
ISC BIND < 8.3.7 / 8.4.3 Negative Record Cache Poisoning
The remote BIND server, according to its version number, is vulnerable to a negative cache poison bug that may allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11932; scriptversion"1.19"; scriptcvsdate"Date: 2018/06/2...
