[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: BIND 8.2.2-P5 Possible DOS
Hello Fabio Pietrosanti (naif),
Tuesday, November 07, 2000, 15:40:49, you wrote:
FPn> Then the server "*** CRASHED ***" .
FPn> I should assume that bind 8.2.2-P5 it's vulnerable ( Please someone
FPn> test and confirm this kind of dos)
...
FPn> A lot of DNS Server are misconfigured, and allow zone-transfer to any,
FPn> so they are dossable...
Yes, 8.2.2 is vulnerable. With "allow-transfer" or without it.
If 8.2.2 havent a "allow-tranfer", request from any host can crash bind.
If 8.2.2 have a "allow-tranfer", request from any host (from
"allow-tranfer" list can crash bind.
--
Thursday, November 09, 2000,
00:49
Best regards from future,
Martin McFlySr, HillDale.
|
