ISC BIND 8.2.2-P6 vulnerable to DoS via compressed zone transfer, aka the "zxfr bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "zxfr bug." It affects ISC BIND version 8.2.2, patch levels 1 through 6. Description Using this vulnerability,...

Possible DOS in Bind 8.2.2-P5

Hi, playing with bind and ZXFR feature zone transfer compressed with a possible insecure execlp"gzip", "gzip", NULL; , i discovered a Denial Of Service against Bind 8.2.2-P5 . By default Bind 8.2.2-P5 it's not compiled with ZXFR support unless you define it with define BINDZXFR so it will refuse...

ISC BIND 8.2.2-P5 - Denial of Service

ISC BIND 8.2.2-P5 - Denial of Service source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in...

ISC BIND 8.2.2-P5 - Denial of Service

source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in the Compressed Zone Transfer ZXFR...

MS Outlook "Cache Bypass" allows attackers to circumvent Internet Zone security policy

Overview Microsoft has recently released Microsoft Security Bulletin MS00-046, in which they announced a patch for the "Cache Bypass" vulnerability. By exploiting this vulnerability, an attacker can use an HTML-formatted message to read certain types of files on the victim's machine. In addition,...

Microsoft Windows NT 4.02000 - LPC Zone Memory Depletion Denial of Service

Microsoft Windows NT 4.02000 - LPC Zone Memory Depletion Denial of Service source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedu...

Microsoft Windows NT 4.0/2000 - LPC Zone Memory Depletion Denial of Service

source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. LPC allocates memory from...

Security Bulletin (MS00-046)

Microsoft Security Bulletin MS00-046 - -------------------------------------- Patch Available for "Cache Bypass" Vulnerability Originally Posted: July 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Outlookr and Outlook Express. The...

Переполнение буфера в Outlook

Классическое переполнение буфера при длинной временной зоне при указании времени в заголовке письма, позволяет выполнение кода...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67 source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates fro...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates from source port 67 on the attacking host the ZoneAlarm...

NXT-Howto.txt

+-------------------------------------------------------+ |BIND 8.2 - 8.2.2 Remote root Exploit How-To by E-Mind| +-------------------------------------------------------+ A What is a DNS? 1. How do I query a DNS? 2. How do I find a vulnerable DNS? B How do I edit DNS entries? 1. How do I find a...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

CVE-1999-0532

A DNS server allows zone transfers...

CVE-2000-0061

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...

CVE-2000-0061

CVE-2000-0061 affects Internet Explorer 5. The vulnerability: during window loading, the document’s security zone is not updated until after loading, permitting a remote attacker to execute JavaScript in a different security context while the page is loading. The record indicates a maximum CVSS v...

CVE-1999-0532

CVE-1999-0532 denotes a DNS zone transfer disclosure. The provided connected docs confirm that a DNS server may allow AXFR zone transfers, enabling an attacker to enumerate zone data. Evidence includes references to a Metasploit DNS enumeration module and various scanners (OpenVAS, Nessus plugin)...

CVE-2000-0061: Undefined Security Weakness

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT...

Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag

Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Internet Explorer 5.0.1 Security Zone Settings Lag Vulnerability source:...