Vulnerabilities (CVE)

Filtered by vendor Isc Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0247 1 Isc 1 Inn 2008-09-09 7.5 HIGH N/A
Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
CVE-1999-0100 1 Isc 1 Inn 2008-09-09 10.0 HIGH N/A
Remote access in AIX innd 1.5.1, using control messages.
CVE-1999-0043 6 Bsdi, Caldera, Isc and 3 more 7 Bsd Os, Openlinux, Inn and 4 more 2008-09-09 10.0 HIGH N/A
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-0184 1 Isc 1 Bind 2008-09-09 6.4 MEDIUM N/A
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVE-2002-2213 2 Infoblox, Isc 2 Dns One, Bind 2008-09-05 5.0 MEDIUM N/A
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVE-2002-2212 2 Fujitsu, Isc 2 Uxp V, Bind 2008-09-05 5.0 MEDIUM N/A
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVE-2002-0525 1 Isc 1 Inn 2008-09-05 10.0 HIGH N/A
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
CVE-1999-1499 1 Isc 1 Bind 2008-09-05 2.1 LOW N/A
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.