Debian DSA-1603-1 : bind9 - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's BIND 9 packages to implement the recommended...

CVE-2007-4590

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...

Command injection

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...

CVE-2007-4590

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...