3098 matches found
Solaris <= 7.0 Recursive mutex_enter Panic Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the serv...
AIX OpenSSL Advisory : openssl_advisory9.doc
The version of OpenSSL installed on the remote host is potentially affected by the following remote code execution and denial of service vulnerabilities : - OpenSSL could allow an attacker to cause a buffer overrun situation when an attacker sends invalid DTLS fragments to an OpenSSL DTLS client ...
CVE-2013-1864
Removed by vendor...
ISC BIND 9.10.0 Recursive Nameserver DoS
Binary data 8247.prm...
CVE-2014-3214: Improper Input Validation
The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a DNS query that triggers a response with unspecified attributes...
Fedora 19 : maradns-2.0.09-1.fc19 (2014-2439)
There has been a long-standing bug in Deadwood ever since 2007 where bounds checking for strings was not correctly done under some circumstances. Because of this, it has been possible to send Deadwood a 'packet of death' which will crash Deadwood. Since the attack causes out-of-bounds memory to b...
[SECURITY] Fedora 20 Update: imapsync-1.584-1.fc20
imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...
DNS Amplification Scanner
This module can be used to discover DNS servers which expose recursive name lookups which can be used in an amplification attack against a third party. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
CVE-2013-4457
The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation...
Design/Logic Flaw
The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation...
CVE-2013-4457: Improper Neutralization of Special Elements used in an OS Command
The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation...
Updated gnupg2 packages fix multiple vulnerabilities
Updated gnupg2 package fixes security vulnerabilities: RFC 4880 permits OpenPGP keyholders to mark their primary keys and subkeys with a "key flags" packet that indicates the capabilities of the key. These are represented as a set of binary flags, including things like "This key may be used to...
Design/Logic Flaw
Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service memory consumption and dropped connections via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests...
CVE-2013-5959: Improper Restriction of Operations within the Bounds of a Memory Buffer
Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service memory consumption and dropped connections via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests...
[WhatWeb v0.4.7] The Content Management Systems (CMS) Technology Scanner
WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 900...
Amazon Linux AMI : bind (ALAS-2012-84)
A flaw was found in the way BIND handled zero length resource data records. A malicious owner of a DNS domain could use this flaw to create specially crafted DNS resource records that would cause a recursive resolver or secondary server to crash or, possibly, disclose portions of its memory...
Oracle Linux 5 : kernel (ELSA-2013-1034)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1034 advisory. - Revert: kernel kmod: make requestmodule killable Frantisek Hrbata 858752 858753 CVE-2012-4398 - Revert: kernel kmod: avoid deadlock from recursive km...
Oracle Linux 5 : bind97 (ELSA-2011-1459)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1459 advisory. 32:9.7.0-6.P2.4 - fix DOS against recursive servers 754398 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...
DNS Amplification Attacks (UDP) - Active Check
A misconfigured Domain Name System DNS server can be exploited to participate in a Distributed Denial of Service DDoS attack. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
