4657 matches found
Spoofing
Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...
CVE-2016-0077: Undefined Security Weakness
Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...
PT-2016-1156
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description A spoofing issue exists due to the improper parsing of HTTP responses by Microsoft browsers. This allows remote attackers to spoof web...
Huawei E5186 4G LTE Router Security Bypass Vulnerability
Huawei E5186 4G LTE Router is a 4G wireless router product from Huawei, China. The Huawei E5186 4G LTE Router allows DNS query packets to use static source ports, allowing remote attackers to exploit this vulnerability to forge responses...
PT-2016-3872
Name of the Vulnerable Software and Affected Versions Huawei Mobile WiFi E5151 versions before E5151s-2TCPU-V200R001B146D27SP00C00 Huawei Mobile WiFi E5186 versions before V200R001B310D01SP00C00 Description The issue allows remote attackers to spoof responses via unspecified vectors, making it...
bind: responses with a malformed class attribute can trigger an assertion failure in db.c
A denial of service flaw was found in the way BIND processed certain records with malformed class attributes. A remote attacker could use this flaw to send a query to request a cached record with a malformed class attribute that would cause named functioning as an authoritative or recursive serve...
Microsoft Edge browser vulnerability, allowing attackers to redirect users to arbitrary websites
The vulnerability of Microsoft Edge relates to the improper handling of HTTP responses. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites remotely...
MGASA-2016-0034 Updated dhcpcd packages fix security vulnerability
Possible heap overflow in dhcpcd before 6.10.0 caused by malformed dhcp responses due to incorrect option length values CVE-2016-1503. Possible invalid read in dhcpcd before 6.10.0 caused by malformed dhcp responses can lead to a crash CVE-2016-1504. The dhcpcd package has been updated to version...
dhcpcd: denial of service
CVE-2016-1503 denial of service An issue has been discovered that can lead to a heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. - CVE-2016-1504 denial of service A malformed dhcp response can lead to an invalid read/crash...
How do I Load Balance DNS traffic (DNS proxy) on NetScaler?
Domain Name Servers DNS are the Internet's equivalent of a phone book. They maintain a directory of domain names and translate them to Internet Protocol IP addresses. When you request DNS resolution of a domain name, the NetScaler appliance uses the configuredLoad Balancing method to select a DNS...
FreeBSD : dhcpcd -- multiple vulnerabilities (df587aa2-b5a5-11e5-9728-002590263bf5)
Nico Golde reports : heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. Exploitation is non-trivial, but I'd love to be proven wrong. invalid read/crash via malformed dhcp responses. not exploitable beyond DoS as far as I can...
Microsoft Edge Multiple Vulnerabilities (3116184)
This host is missing a critical security update according to Microsoft Bulletin MS15-125. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
dhcpcd -- multiple vulnerabilities
Nico Golde reports: heap overflow via malformed dhcp responses later in printoption via dhcpenvoption1 due to incorrect option length values. Exploitation is non-trivial, but I'd love to be proven wrong. invalid read/crash via malformed dhcp responses. not exploitable beyond DoS as far as I can...
CVE-2015-7282
ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
Design/Logic Flaw
ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
IBM B2B Advanced Communications Information Disclosure Vulnerability
IBM B2B Advanced Communication is a communication gateway product from IBM USA. An information disclosure vulnerability exists in IBM B2B Advanced Communications versions 1.0.0.2 and 1.0.0.3. An attacker can exploit the vulnerability to obtain sensitive information in error response messages with...
CVE-2015-7279: Undefined Security Weakness
Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
CVE-2015-7282: Improper Input Validation
ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...
CVE-2015-5987: Undefined Security Weakness
Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...
