Isc
Page 3 of 3 — Isc CVEs from a corpus of 253, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2008-4163 | | 2008-09-22 | Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client han… | |
CVE-2008-1447 | Medium | 6.8 | 2008-07-08 | The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server… |
CVE-2008-0122 | | 2008-01-16 | Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-d… | |
CVE-2007-2930 | | 2007-09-12 | The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing… | |
CVE-2007-2926 | | 2007-07-24 | ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages… | |
CVE-2007-2925 | | 2007-07-24 | The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which a… | |
CVE-2007-2241 | | 2007-05-02 | Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of se… | |
CVE-2007-0494 | | 2007-01-25 | ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remot… | |
CVE-2007-0493 | | 2007-01-25 | Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote… | |
CVE-2006-4096 | | 2006-09-06 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an IN… | |
CVE-2006-4095 | High | 7.5 | 2006-09-06 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion f… |
CVE-2006-3122 | | 2006-08-09 | The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPD… | |
CVE-2006-2073 | | 2006-04-27 | Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by t… | |
CVE-2006-0987 | | 2006-03-03 | The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation in… | |
CVE-2006-0527 | | 2006-02-02 | BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruptio… | |
CVE-2005-0034 | | 2005-05-02 | An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (… | |
CVE-2005-0033 | | 2005-05-02 | Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries th… | |
CVE-2004-1006 | | 2005-03-01 | Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a differen… | |
CVE-2004-0461 | | 2004-08-06 | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files th… | |
CVE-2004-0460 | | 2004-08-06 | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service… | |
CVE-2004-0045 | | 2004-02-03 | Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code. | |
CVE-2003-0914 | | 2003-12-15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses wi… | |
CVE-2003-0039 | | 2003-02-07 | ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BO… | |
CVE-2003-0026 | | 2003-01-17 | Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1… | |
CVE-2002-2213 | | 2002-12-31 | The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS… | |
CVE-2002-2212 | | 2002-12-31 | The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cac… | |
CVE-2002-2211 | | 2002-12-31 | BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that… | |
CVE-2002-1221 | | 2002-11-29 | BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the i… | |
CVE-2002-1220 | | 2002-11-29 | BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does no… | |
CVE-2002-1219 | | 2002-11-29 | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certa… | |
CVE-2002-0029 | | 2002-11-29 | Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote at… | |
CVE-2002-0684 | | 2002-08-12 | Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allo… | |
CVE-2002-0525 | | 2002-08-12 | Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via fo… | |
CVE-2002-0702 | | 2002-07-26 | Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled… | |
CVE-2002-0651 | | 2002-07-03 | Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of s… | |
CVE-2002-0400 | | 2002-06-18 | ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not… | |
CVE-2001-0497 | High | 7.8 | 2001-07-21 | dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS T… |
CVE-2001-1442 | | 2001-04-21 | Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argumen… | |
CVE-2001-0013 | | 2001-02-12 | Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. | |
CVE-2001-0012 | | 2001-02-12 | BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. | |
CVE-2001-0011 | | 2001-02-12 | Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. | |
CVE-2001-0010 | | 2001-02-12 | Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. | |
CVE-2000-0888 | | 2000-12-19 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." | |
CVE-2000-0887 | | 2000-12-19 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a na… | |
CVE-2000-1029 | | 2000-12-11 | Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. | |
CVE-2000-0360 | | 2000-10-20 | Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. | |
CVE-2000-0585 | | 2000-06-24 | ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0335 | | 2000-05-03 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. | |
CVE-1999-0706 | | 2000-04-27 | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | |
CVE-2000-0472 | | 2000-02-06 | Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. | |
CVE-1999-0808 | | 1999-12-31 | Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute… | |
CVE-1999-0849 | | 1999-11-10 | Denial of service in BIND named via maxdname. | |
CVE-1999-0848 | | 1999-11-10 | Denial of service in BIND named via consuming more than "fdmax" file descriptors. | |
CVE-1999-0837 | | 1999-11-10 | Denial of service in BIND by improperly closing TCP sessions via so_linger. | |
CVE-1999-0833 | | 1999-11-10 | Buffer overflow in BIND 8.2 via NXT records. | |
CVE-1999-0705 | | 1999-09-01 | Buffer overflow in INN inews program. | |
CVE-1999-0785 | | 1999-05-11 | The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file. | |
CVE-1999-0754 | | 1999-05-11 | The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. | |
CVE-1999-1499 | | 1998-04-10 | named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) n… | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0024 | | 1997-08-13 | DNS cache poisoning via BIND, by predictable query IDs. | |
CVE-1999-0247 | | 1997-07-21 | Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. | |
CVE-1999-0184 | | 1997-07-01 | When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records. | |
CVE-1999-0868 | | 1997-02-20 | ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. | |
CVE-1999-0100 | | 1997-01-01 | Remote access in AIX innd 1.5.1, using control messages. | |
CVE-1999-0043 | Critical | 9.8 | 1996-12-04 | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |