Home page logo

bugtraq logo Bugtraq mailing list archives

Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers
From: Mike Bell <mike () mikebell org>
Date: Tue, 11 Mar 2003 20:10:28 -0800

On Tue, Mar 11, 2003 at 08:30:17AM -0800, Mike Schiffman wrote:
12) It is a bit misleading to say djbdns has no security 
vulnerabilities.  While it is true that the component programs that 
make up djbdns have not had a known vulnerability, the design of djbdns 
relies on external services (Bernstein recommends rsync over ssh, I 
believe) to replicate data from the primary to secondaries.

By that logic a bug in vi is a bug in BIND, because you need an editor
to maintain zone files.

DJB may recommend rsync over ssh, but djbdns as distributed by DJB only
offers that as one potential way to get data from one computer to another,
you can use any means you see fit to do so.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]