cups: DNS rebinding attacks via incorrect whitelist

A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...

Moderate: Red Hat Security Advisory: cups security and bug fix update

An update for cups is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

SRC-2022-0004 : Microsoft SharePoint Server SPWebRequest SafeCreate TOCTOU DNS Rebinding Security Feature Bypass Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose bypass access IP restrictions on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPWebRequest SafeCreate API. The issu...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24377

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

CVE-2020-24377

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

Design/Logic Flaw

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

Design/Logic Flaw

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

Design/Logic Flaw

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24377

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

CVE-2020-24377

CVE-2020-24377 is a DNS rebinding vulnerability in the Freebox OS web interface of Freebox Server prior to 4.2.3. The issue affects the web UI component used to manage the device and is driven by DNS rebinding. Impact is described as high, with the potential for unauthorized actions via the web i...

CVE-2020-24376

CVE-2020-24376 describes a DNS rebinding vulnerability in the UPnP Internet Gateway Device (IGD) implementations of Freebox v5 prior to 1.5.29 and Freebox Server prior to 4.2.3. The connected records confirm the affected products and versions and reiterate the same vulnerability description. No d...

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24374

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24374

The CVE-2020-24374 entry describes a DNS rebinding vulnerability in Freebox v5 prior to 1.5.29. The available connected sources indicate that the issue affects Freebox software (v5) and that upgrading to version 1.5.29 or later mitigates the vulnerability (per PT-2020-15716). CVSS metrics in the ...

PT-2020-15719 · Freebox · Freebox Server

Name of the Vulnerable Software and Affected Versions: Freebox Server versions prior to 4.2.3 Description: A DNS rebinding issue affects the Freebox OS web interface. This could potentially allow for malicious actions. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later...

PT-2020-15716 · Free · Freebox

Name of the Vulnerable Software and Affected Versions: Freebox version 1.5.28 and earlier Description: A DNS rebinding issue affects the software, potentially allowing unauthorized access. Recommendations: For versions prior to 1.5.29, update to version 1.5.29 or later to resolve the issue...