274 matches found
RHEL 5 : dnsmasq (RHSA-2008:0789)
An updated dnsmasq package that implements UDP source-port randomization is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Dnsmasq is lightweight DNS forwarder and DHCP server. It is designed to...
bind: implement source UDP port randomization (CERT VU#800113)
The DNS protocol, as implemented in 1 BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; 2 Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referral...
Debian DSA-1623-1 : dnsmasq - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's dnsmasq packages to implement the recommended...
[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-1623-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...
Debian DSA-1619-1 : python-dns - DNS response spoofing
Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...
DSA-1617-1 refpolicy - incompatible policy
Bulletin has no description...
DNS Server Source Port 53 Query Usage
Binary data 4601.prm...
CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
Input validation
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing...
SuSE 10 Security Update : bind (ZYPP Patch Number 5409)
The transaction id and the udp source port used for DNS queries by the bind nameserver were predicatable. Attackers could potentially exploit that weakness to manipulate the DNS cache 'DNS cache poisoning', CVE-2008-1447. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description o...
sdns-remote-dos.pl.txt
!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...
Simple DNS Plus 5.04.1 - Remote Denial of Service
Simple DNS Plus 5.04.1 - Remote Denial of Service !/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $tran...
Debian DSA-1603-1 : bind9 - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's BIND 9 packages to implement the recommended...
DEBIAN-CVE-2008-1447
The DNS protocol, as implemented in 1 BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; 2 Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referral...
bind, caching, selinux security update
CentOS Errata and Security Advisory CESA-2008:0533 Updated bind packages that help mitigate DNS spoofing attacks are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 10th July 2008 We have updated the Enterprise Linux 5...
Important: Red Hat Security Advisory: bind security update
Updated bind packages that help mitigate DNS spoofing attacks are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 10th July 2008 We have updated the Enterprise Linux 5 packages in this advisory. The default and sample...
DSA-1604-1 bind - DNS cache poisoning
Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. The BIND 8 legacy code base could not be updated to include the recommended...
FreeBSD -- DNS cache poisoning
Problem Description: The BIND DNS implementation does not randomize the UDP source port when doing remote queries, and the query id alone does not provide adequate randomization. Impact: The lack of source port randomization reduces the amount of data the attacker needs to guess in order to...