320 matches found
CVE-2010-4873
Cross-site scripting XSS vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2010-4873
The CVE-2010-4873 entry concerns WeBid 0.8.5 P1 with a reflected cross-site scripting (XSS) vulnerability in confirm.php, exploitable by supplying a crafted id parameter. The root cause is insufficient input sanitization of user-supplied id, enabling remote attackers to inject arbitrary script/HT...
Fedora 13 : bind-9.7.3-2.P1.fc13 (2011-7621)
Update to 9.7.3-P1 which fixes CVE-2011-1910 : - large RRSIG RRsets and negative caching can crash named Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...
Mandriva Linux Security Advisory : bind (MDVSA-2011:104)
A vulnerability has been identified and fixed in ISC BIND : Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via...
bind security update
32:9.7.3-2.1.P1 - update to 9.7.3-P1 CVE-2011-1910...
Fedora 15 : bind-9.8.0-3.P1.fc15 (2011-6680)
Update to the 9.8.0-P1 release which fixes one security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Mandriva Linux Security Advisory : dhcp (MDVSA-2011:073)
A vulnerability has been found and corrected in ISC DHCP : dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...
DSA-2184-1 isc-dhcp - denial of service
Bulletin has no description...
CVE-2010-0218
ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired RD queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query...
Design/Logic Flaw
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...
CVE-2010-0213
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...
ISC BIND DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...
Fedora Core 9 FEDORA-2009-0350 (bind)
The remote host is missing an update to bind announced via advisory FEDORA-2009-0350. OpenVAS Vulnerability Test $Id: fcore20090350.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0350 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora 9 : bind-9.5.1-1.P1.fc9 (2009-0350)
Update to 9.5.1-P1 maintenance release which includes fix for CVE-2009-0025. This update also fixes rare crash of host utility. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...
ISC BIND OpenSSL DSA_verify() Security Bypass Vulnerability
ISC BIND is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
bind security, bug fix, and enhancement update
30:9.3.4-6.P1 - final 5.2 version - minor changes in initscript - improved patches for 250744 and 250901 30:9.3.4-5.P1 - improved patch to handle D-BUS races 240876 - updated named.root zone to affect root IPv6 migration 30:9.3.4-4.P1 - improved fix for 253537, posttrans script is now used - do n...
Fedora 7 : bind-9.4.1-7.P1.fc7 (2007-1247)
CVE-2007-2925 - allow-query-cache/allow-recursion default acls not set - workaround - disable recursion or explicitly set allow-query-cache and allow-recursion acls - CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids -...
ISC BIND < 8.4.7-P1 Outgoing Query Predictable DNS Query ID (deprecated)
Binary data 4195.prm...
CVE-2006-5378
Technical details about CVE-2006-5378 are not publicly available in the provided documents. The records describe an unspecified vulnerability with unknown impact. Monitor for updates; no file/version specifics or remediation are provided here.
CVE-2006-4096
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty...