S-358: DNS Vulnerability

Tags

dns, security, vulnerability

Special Forums Cybersecurity Security Advisories (RSS) S-358: DNS Vulnerability

08-18-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-358: DNS Vulnerability

The properties inherent to the DNS protocol lead to pratical DNS cache poisoning attacks. This can lead to misdirected web traffic and email rerouting. The risk is HIGH. Successful attacks can lead to misdirected web traffic and email rerouting.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Red Hat

DHCP & DNS - Clients get IP but don't register in DNS

I am trying to setup a CentOS 6.2 server that will be doing 3 things DHCP, DNS & Samba for a very small office (2 users). The idea being this will replace a very old Win2k server. The users are all windows based clients so only the server will be Linux based. I've installed CentOS 6.2 with...

2. Solaris

Solaris 10, Samba 358 doesn't work after patching

Hi Forum, I updated my Solaris 10 (10/09) with the current Oracle patch file and moved the smb.conf to /etc/samba/smb.conf. Anyway, since patching, no Windows client is able to connect the share. It says password is wrong, but its the right pw. My smb.conf: bash-3.00# cat...

LEARN ABOUT DEBIAN

polygraph-dns-cfg

POLYGRAPH-DNS-CFG(1)						   User Commands					      POLYGRAPH-DNS-CFG(1)

NAME

       polygraph-dns-cfg - DNS server configuration tool

SYNOPSIS

       dns-cfg [--option ...]

DESCRIPTION

       Given  a  zone  name, DNS names, and IP addresses, dns-cfg builds configuration suitable for use with BIND and, perhaps, other DNS servers.
       Dns-cfg output consists of three parts. The first part is the text to cut-and-paste into BIND's named.conf file. This part is sent  to  the
       standard  output. The outer two parts are direct and reverse zone files. Those may be quite large and are dumped on disk into the appropri-
       ately named files. Dns-cfg can use PGL configuration as the source of information.

OPTIONS

       --help list of options

       --version
	      package version info

       --config <filename>
	      PGL configuration

       --cfg_dirs <dirs>
	      directories for PGL #includes

       --zone <str>
	      zone name

       --addresses <str>
	      IP addresses

       --names <str>
	      domain names

COPYRIGHT

       Copyright (C) 2003-2006 The Measurement Factory, Inc.

SEE ALSO

       polygraph(7) - general information and a list of programs

       http://www.web-polygraph.org/ - project web site

polygraph-dns-cfg - Web Polygraph				   February 2010					      POLYGRAPH-DNS-CFG(1)

Security Advisories (RSS)