NSD packet.c Off-By-One Remote Overflow

According to its self-reported version number, the version of NSD running on the remote host has a stack-based buffer overflow vulnerability. This could allow a remote attacker to overwrite one byte in memory, leading to a denial of service. It is possible, but unlikely, that this vulnerability...

[SECURITY] [DSA 1803-1] New nsd packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1803-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2009 http://www.debian.org/security/faq -...

NSD version Directive Remote Version Disclosure

The remote host is running Name Server Daemon NSD, an open source DNS server. It is possible to extract the version number of the remote installation by sending a special DNS request for the text 'version.bind' in the domain 'chaos'. C Tenable Network Security, Inc. include"compat.inc"; if...

[SECURITY] Fedora 10 Update: nsd-3.2.2-2.fc10

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution thanks to Olaf...

[SECURITY] Fedora 9 Update: nsd-3.2.2-1.fc9

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution thanks to Olaf...

Fedora 9 : nsd-3.2.2-1.fc9 (2009-5190)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...

FreeBSD : nsd -- buffer overflow vulnerability (37a8603d-4494-11de-bea7-000c29a67389)

NLnet Labs : A one-byte buffer overflow has been reported in NSD. The problem affects all versions 2.0.0 to 3.2.1. The bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. %NASLMINLEVEL 70300 C...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

Fedora 10 : nsd-3.2.2-2.fc10 (2009-5191)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...

DSA-1803-1 nsd nsd3 - denial of service

Bulletin has no description...

nsd -- buffer overflow vulnerability

NLnet Labs: A one-byte buffer overflow has been reported in NSD. The problem affects all versions 2.0.0 to 3.2.1. The bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits...

CVE-2003-0573

CVE-2003-0573 relates to SGI IRIX’s Name Service Daemon (nsd). The issue is that DNS callbacks in nsd on IRIX 6.5.x (through 6.5.20f and possibly earlier) do not perform sufficient sanity checking. The impact is not explicitly stated in the CVE description, and exploitation details are not provid...

CVE-2003-0572

The CVE-2003-0572 issue concerns the SGI IRIX Name Service Daemon (nsd). The SGI advisory notes multiple nsd vulnerabilities in IRIX 6.5.x up to 6.5.20f (and possibly earlier), with the specific CVECAN-2003-0572 issue described as dynamic maps in nsd that can be made to consume memory, leading to...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...

CVE-2003-0176

CVE-2003-0176 affects the IRIX Name Service Daemon (nsd) running as an NIS master on SGI IRIX 6.5.x (through 6.5.20f and possibly earlier). The vulnerability allows remote attackers to cause a denial of service (crash) by sending UDP port scans to nsd. Public sources in connected documents confir...

IRIX nsd server and modules mishandle AUTH_UNIX gid list

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : IRIX nsd server and modules mishandle AUTHUNIX gid list Number : 20030704-01-P Date : July 29, 2003 Reference : CVE CAN-2003-0575 Reference : SGI BUG 873591 Fixed in : IRIX 6.5.22 or patches 5189-5197 SGI provides this information...

[LSD] IRIX nsd remote buffer overflow vulnerability

Hello, We have discovered a serious security vulnerability in the IRIX nsd service, which when properly exploited can result in an unauthorized remote root access to the vulnerable system. SGI was informed about this issue and assigned this bug number CVE CAN-2003-0575...

CVE-2003-0174

The vulnerability affects SGI IRIX: the LDAP name service (nsd) and libns_ldap.so on IRIX 6.5.x (IRIX 6.5.19 and earlier). The root cause is that nsd does not verify whether the LDAP server provides the USERPASSWORD attribute for entries, which could allow an attacker to log in without a password...

CVE-2002-0174

IRIX nsd symlink vulnerability (CVE-2002-0174): on SGI IRIX versions prior to 6.5.11, nsd can be tricked via a symlink attack on /var/tmp/nsd.dump to damage/modify the dump file when the nsd process receives USR1. Local users could potentially gain root privileges. The advisory fixes/change is to...

CVE-2002-0038

Technical details about CVE-2002-0038 are not publicly provided in the supplied documents. The data confirms a denial-of-service risk in IRIX nsd 6.5.4–6.5.11, but no specifics on vectors or fixes are included here. Monitor for updates.