Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Re DNS spoofing issue discussion
From: don bailey <don.bailey () gmail com>
Date: Thu, 31 Jul 2008 21:17:00 -0600

The BGP fixes were devised after the last meltdown, but question again
is whether they are installed. If DNSSEC had been installed, Kaminsky's 
would not exist.

That's probably not the case. It would only alter the scope of
attack to include encryption and not simply port+xid. Since UDP
is stateless one could could have theoretically kicked off some
semblance of brute force attack against the key used for
encryption. For algorithms that use bits larger than would be
feasible for brute force attacks, the latest SNMPv3 vulnerability
comes to mind, as does Tim Newsham's attack on WEP.

In other words, there are always options. The attack wouldn't have
gone away. As they say, there are 1,000,000 ways to get to Detroit.


Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]