172 matches found
CVE-2002-0804
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname...
CVE-2002-0180
Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname...
CVE-2002-0180
Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname...
CVE-2002-0180
CVE-2002-0180, a buffer overflow in Webalizer when reverse DNS lookups are enabled, can allow remote code execution by connecting from an IP whose hostname resolves long. Affected versions include Webalizer prior to 2.01-10; Red Hat advisory RHSA-2002:255 fixes with Webalizer 2.01-09 backported p...
Remote buffer overflow in Webalizer
Release : April 15 2002 Author : Spybreak [email protected] Software : Webalizer Version : 2.01-09, 2.01-06 URL : http://www.mrunix.net/webalizer/ Status : vendor contacted Problems : remote buffer overflow --- INTRO --- The Webalizer is a web server log file analysis program which produces usage...
CVE-1999-0223
CVE-1999-0223 describes a crash in Solaris syslogd when it processes a message from a host that lacks an inverse DNS entry. The issue is tied to the syslogd service on Solaris; the root cause is the handling of such messages, leading to a crash. Public references (NVD entry) indicate an impact on...
CVE-2001-0207
Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function...
CVE-2001-0029
Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...
CVE-2000-0536
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry...
CVE-2000-0536
CVE-2000-0536 affects xinetd 2.1.8.x where access control relies on hostnames; if a connecting host has no reverse DNS entry, connections are not properly restricted. This can allow unauthorized access or bypass controls intended by hostname-based filtering. The vulnerability is described in the ...
CVE-2000-0543
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000...