SuSE: bind (SUSE-SA:2008:033)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) SuSE: bind (SUSE-SA:2008:033)
# 1  
Old 07-11-2008
SuSE: bind (SUSE-SA:2008:033)

LinuxSecurity.com: The new version of bind uses a random transaction-ID (TRXID) and a random UDP source-port for DNS queries to address DNS cache poisoning attacks possible because of the "birthday paradox" and an attack discovered by Dan Kaminsky. Unfortunately we do not have details about Kaminsky's attack and have to trust the statement that a random UDP source-port is sufficient to stop it.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
explain_bind_or_die(3)					     Library Functions Manual					    explain_bind_or_die(3)

NAME
explain_bind_or_die - bind a name to a socket and report errors SYNOPSIS
#include <libexplain/bind.h> void explain_bind_or_die(int fildes, const struct sockaddr *sock_addr, int sock_addr_size); DESCRIPTION
The explain_bind_or_die function is used to call the bind(2) system call. On failure an explanation will be printed to stderr, obtained from explain_bind(3), and then the process terminates by calling exit(EXIT_FAILURE). This function is intended to be used in a fashion similar to the following example: explain_bind_or_die(fildes, sock_addr, sock_addr_size); fildes The fildes, exactly as to be passed to the bind(2) system call. sock_addr The sock_addr, exactly as to be passed to the bind(2) system call. sock_addr_size The sock_addr_size, exactly as to be passed to the bind(2) system call. Returns: This function only returns on success. On failure, prints an explanation and exits. SEE ALSO
bind(2) bind a name to a socket explain_bind(3) explain bind(2) errors exit(2) terminate the calling process COPYRIGHT
libexplain version 0.52 Copyright (C) 2008 Peter Miller explain_bind_or_die(3)