551 matches found
Microsoft Internet Explorer 5 6 7 memory corruption PoC
No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two HTTP...
DNS BailiWicked Host Attack
This exploit attacks a fairly ubiquitous flaw in DNS implementations which Dan Kaminsky found and disclosed Jul 2008. This exploit caches a single malicious host entry into the target nameserver by sending random hostname queries to the target DNS server coupled with spoofed replies to those...
DNS BailiWicked Domain Attack
This exploit attacks a fairly ubiquitous flaw in DNS implementations which Dan Kaminsky found and disclosed Jul 2008. This exploit replaces the target domains nameserver entries in a vulnerable DNS cache server. This attack works by sending random hostname queries to the target DNS server coupled...
Mandriva Update for dhcp MDKA-2007:074 (dhcp)
Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDKA-2007:074 dhcp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Sun Java System Identity Manager / Access Manager accounts enumeration
Replies for invalid username and invalid password are different...
DNS vulnerabilities to attack the Ruby code-vulnerability warning-the black bar safety net
1 require 'msf/core' 2 require 'net/dns' 3 require 'scruby' 4 require 'resolv' 5 6 module Msf 7 8 class Auxiliary::Spoof::Dns::BaliWickedHost Msf::Auxiliary 9 1 0 The include Exploit::Remote::Ip 1 1 1 2 def initializeinfo = 1 3 superupdateinfoinfo, 1 4 'Name' = 'DNS BaliWicked Attack', 1 5...
Ubuntu Update for dhcp vulnerability USN-531-2
Ubuntu Update for Linux kernel vulnerabilities USN-531-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5312.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dhcp vulnerability USN-531-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Fedora Core 10 FEDORA-2008-11848 (libcdaudio)
The remote host is missing an update to libcdaudio announced via advisory FEDORA-2008-11848. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
GLSA-200901-03 : pdnsd: Denial of Service and cache poisoning
The remote host is affected by the vulnerability described in GLSA-200901-03 pdnsd: Denial of Service and cache poisoning Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to a...
grip,libcdaudio: buffer overflow caused by large amount of CDDB replies
Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...
Fedora 9 : grip-3.2.0-24.fc9 (2008-9604)
Sun Nov 9 2008 Adrian Reber - 1:3.2.0-24 - fixed 'buffer overflow caused by large amount of CDDB replies' 470552 CVE-2005-0706 - Thu Oct 2 2008 Adrian Reber - 1:3.2.0-23 - fixed 'German Umlauts are shown incorrectly' 459394 not converting de.po and fr.po to UTF-8 anymore - Sat Aug 23 2008 Adrian...
CVE-2008-4614
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
BIND 9.5.0-P2 (randomized ports) Remote DNS Cache Poisoning Exploit
No description provided by source. Successfully poisoned the latest BIND with fully randomized ports! Exploit required to send more than 130 thousand of requests for the fake records like 131737-4795-15081.blah.com to be able to match port and ID and insert poisoned entry for the...
evolution: iCalendar buffer overflow via large description parameter
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
Samba < 3.0.27 Multiple Vulnerabilities
According to its banner, the version of the Samba server on the remote host contains a boundary error in the 'replynetbiospacket' function in 'nmbd/nmbdpackets.c' when sending NetBIOS replies. Provided the server is configured to run as a WINS server, a remote attacker can exploit this issue by...
Design/Logic Flaw
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors...
[Full-disclosure] Predictable DNS transaction IDs in Microsoft DNS Server
1 Summary Affected software: Microsoft Windows 2003 SP2, Microsoft Windows 2000 SP4 Server Vendor URL: www.microsoft.com Severity: Medium References: Microsoft Security Bulletin MS07-062, CVE-2007-3898 2 Vulnerability Description Microsoft DNS server generates predictable DNS transaction IDs. If...
DSA-1388-3 dhcp - buffer overflow
Bulletin has no description...
