mailing list archives
Re: BIND 8.2.2-P5 Possible DOS
From: Martin McFlySr <Martin () McFlySr Kurgan Ru>
Date: Thu, 9 Nov 2000 01:00:01 +0300
Hello Fabio Pietrosanti (naif),
Tuesday, November 07, 2000, 15:40:49, you wrote:
FPn> Then the server "*** CRASHED ***" .
FPn> I should assume that bind 8.2.2-P5 it's vulnerable ( Please someone
FPn> test and confirm this kind of dos)
FPn> A lot of DNS Server are misconfigured, and allow zone-transfer to any,
FPn> so they are dossable...
Yes, 8.2.2 is vulnerable. With "allow-transfer" or without it.
If 8.2.2 havent a "allow-tranfer", request from any host can crash bind.
If 8.2.2 have a "allow-tranfer", request from any host (from
"allow-tranfer" list can crash bind.
Thursday, November 09, 2000,
Best regards from future,
Martin McFlySr, HillDale.