Searching successfully software vulnerabilities

BIND 4 and BIND 8, when resolving recursive DNS

arbitrary | attackers | recursive | poisoning | resolving | birthday | resource | conduct | queries | attack | number | record | allows | remote | large | cache | hosts | same | BIND | open | uses | DNS | via |

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.


The DNS resolver in unspecified versions of Fuj

unspecified | recursive | resolving | arbitrary | attackers | poisoning | versions | resource | resolver | birthday | conduct | queries | Fujitsu | record | attack | number | allows | remote | large | hosts | UXP/V | cache | same | open | uses | DNS | via |

The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.


The DNS resolver in unspecified versions of Inf

unspecified | recursive | resolving | arbitrary | attackers | poisoning | versions | resolver | resource | birthday | Infoblox | conduct | queries | record | attack | number | remote | allows | hosts | large | cache | open | same | uses | One | DNS | via |

The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.


Microsoft Windows 2000 before Update Rollup 1 f

Microsoft | Windows |

Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.


Microsoft Windows 2000 before Update Rollup 1 f

Microsoft | Windows |

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.


Unchecked error condition in LoginWindow in App

LoginWindow | condition | Unchecked | Apple | error | Mac |

Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does not successfully log on to a network account from the login window, which might allow later users to gain access to the original user's Kerberos tickets.


Software vulnerabilities results 1 to 7 of 7     
Page: 1