117 matches found
bind: denial of service
A very uncommon combination of zone data has been found that triggers a bug in BIND, with the result that named will exit with a "REQUIRE" failure in name.c when validating the data returned in answer to a recursive query. This means that a recursive resolver that is performing DNSSEC validation...
ISC BIND 9 Zero-Length RDATA Section Denial of Service / Information Disclosure
Binary data 6806.prm...
GLSA-201206-01 : BIND: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201206-01 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities allow remote attackers to cause a Denial ...
Ubuntu Update for bind9 vulnerabilities USN-1025-1
Ubuntu Update for Linux kernel vulnerabilities USN-1025-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10251.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for bind9 vulnerabilities USN-1025-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
USN-1025-1: Bind vulnerabilities
It was discovered that Bind would incorrectly allow a ncache entry and a rrsig for the same type. A remote attacker could exploit this to cause Bind to crash, resulting in a denial of service. CVE-2010-3613 It was discovered that Bind would incorrectly mark zone data as insecure when the zone is...
ISC BIND named validator vulnerability
Overview ISC BIND named contains a vulnerability where under certain situations it could incorrectly mark zone data as insecure. Description According to ISC:named, acting as a DNSSEC validator, was determining if an NS RRset is insecure based on a value that could mean either that the RRset is...
ISC BIND 9.4-ESV < 9.4-ESV-R4 / 9.6.2 < 9.6.2-P3, 9.6-ESV < 9.6-ESV-R3 / 9.7.x < 9.7.2-P3 Multiple Vulnerabilities
Binary data 5718.prm...
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities
MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...
DSA-1831-1 djbdns - privilege escalation
Bulletin has no description...
CVE-2009-0858
The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...
DEBIAN-CVE-2009-0858
The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...
CVE-2008-0051
Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data...
Integer overflow
Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data...
CVE-2008-0051
Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data...
CVE-2008-0051
CVE-2008-0051 : Integer overflow in CoreFoundation when processing time zone data affects Apple Mac OS X 10.4.11 (and related server variants). Local users could gain system privileges and execute arbitrary code due to the overflow. Remediation: apply the Apple Security Update 2008-002 (patched i...
