Debian: New PowerDNS packages reduce DNS spoofing risk

Tags

debian, packages, security

Special Forums Cybersecurity Security Advisories (RSS) Debian: New PowerDNS packages reduce DNS spoofing risk

08-11-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

Debian: New PowerDNS packages reduce DNS spoofing risk

LinuxSecurity.com: Brian Dowling discovered that the PowerDNS authoritative name server does not respond to DNS queries which contain certain characters, increasing the risk of successful DNS spoofing (CVE-2008-3337). This update changes PowerDNS to respond with SERVFAIL responses instead.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Cybersecurity

Help Make a spoofing DNS using pcap library

Hello all, i need your quick help. I have assignment project class to make a program using pcap library to spoofing DNS in linux environment. Can anyone help me, because i'm newbie in network security and in C?:confused: Regards, ptrfw

LEARN ABOUT DEBIAN

dns-flood-detector

DNS-FLOOD-DETECTOR(8)					     dns flood detection tool					     DNS-FLOOD-DETECTOR(8)

NAME

       DNS-FLOOD-DETECTOR - dns flood detection and alert tool

SYNOPSIS

       dns-flood-detector [-b|-d] [-v] [-h] [-i device] [-t n] [-a n] [-w n] [-x n] [-m n]

DESCRIPTION

       DNS  Flood  Detector  was  developed  to detect abusive usage levels on high traffic nameservers and to enable quick response to the use of
       one's nameserver to facilitate spam.

OPTIONS

       -b     run in foreground in bindsnap mode

       -d     run in background in daemon mode

       -v     verbose output - use again for more verbosity

       -h     display help

       -i device
	      specify device name to listen on

       -t n   alarm at >n queries per second

       -a n   reset alarm after n seconds

       -w n   calculate stats every n seconds

       -x n   create n buckets

       -m n   report overall stats every n seconds

SEE ALSO

       Website <http://www.adotout.com/>

AUTHOR

       DNS-FLOOD-DETECTOR was written by Dennis Opacki <dopacki@adotout.com>.

       This manual page was written by Jan Wagner <waja@cyconet.org>, for the Debian project (but may be used by others).

1.10								    2006-11-03						     DNS-FLOOD-DETECTOR(8)

Security Advisories (RSS)