T-021: libspf2 DNS TXT Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-021: libspf2 DNS TXT Vulnerability
# 1  
Old 11-13-2008
T-021: libspf2 DNS TXT Vulnerability

libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. An SPF record is a DNS Resource Record (RR) that declares which hosts are, and are not, authorized to use a domain name for the "HELO" and "MAIL FROM" identities. The risk is MEDIUM. This vulnerability could allow an unauthenticated, remote attacker to execute arbitrary code on a system running libspf2.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

In BIND 9.3 DNS trying to get past the 256 char limit in SPF TXT records

One way I was told to do was incase strings in quotes. But I was given this option if I can get it to work. Will this work for splitting up SPF records? I am try to make bx.example.com reference spf.eu.***, spfa.eu.***, spfb.eu.***, and spfc.eu.***. spf.eu.example.com 3600 IN TXT "v=spf1... (0 Replies)
Discussion started by: tmanx
0 Replies
Login or Register to Ask a Question
Net::DNS::RR(3) 					User Contributed Perl Documentation					   Net::DNS::RR(3)

NAME
Net::DNS::RR - DNS Resource Record class SYNOPSIS
"use Net::DNS::RR" DESCRIPTION
"Net::DNS::RR" is the base class for DNS Resource Record (RR) objects. See also the manual pages for each RR type. METHODS
WARNING!!! Don't assume the RR objects you receive from a query are of a particular type -- always check an object's type before calling any of its methods. If you call an unknown method, you'll get a nasty warning message and "Net::DNS::RR" will return "undef" to the call- er. new (from string) $a = Net::DNS::RR->new("foo.example.com. 86400 A 10.1.2.3"); $mx = Net::DNS::RR->new("example.com. 7200 MX 10 mailhost.example.com."); $cname = Net::DNS::RR->new("www.example.com 300 IN CNAME www1.example.com"); $txt = Net::DNS::RR->new("baz.example.com 3600 HS TXT 'text record'"); Returns a "Net::DNS::RR" object of the appropriate type and initialized from the string passed by the user. The format of the string is that used in zone files, and is compatible with the string returned by "Net::DNS::RR"->"string". The name and RR type are required; all other information is optional. If omitted, the TTL defaults to 0 and the RR class defaults to IN. Omitting the optional fields is useful for creating the empty RDATA sections required for certain dynamic update operations. See the "Net::DNS::Update" manual page for additional examples. All names must be fully qualified. The trailing dot (.) is optional. new (from hash) $rr = Net::DNS::RR->new( Name => "foo.example.com", TTL => 86400, Class => "IN", Type => "A", Address => "10.1.2.3", ); $rr = Net::DNS::RR->new( Name => "foo.example.com", Type => "A", ); Returns an RR object of the appropriate type, or a "Net::DNS::RR" object if the type isn't implemented. See the manual pages for each RR type to see what fields the type requires. The "Name" and "Type" fields are required; all others are optional. If omitted, "TTL" defaults to 0 and "Class" defaults to IN. Omitting the optional fields is useful for creating the empty RDATA sections required for certain dynamic update operations. The fields are case-insensitive, but starting each with uppercase is recommended. print $rr->print; Prints the record to the standard output. Calls the string method to get the RR's string representation. string print $rr->string, " "; Returns a string representation of the RR. Calls the rdatastr method to get the RR-specific data. rdatastr $s = $rr->rdatastr; Returns a string containing RR-specific data. Subclasses will need to implement this method. name $name = $rr->name; Returns the record's domain name. type $type = $rr->type; Returns the record's type. class $class = $rr->class; Returns the record's class. ttl $ttl = $rr->ttl; Returns the record's time-to-live (TTL). rdlength $rdlength = $rr->rdlength; Returns the length of the record's data section. rdata $rdata = $rr->rdata Returns the record's data section as binary data. BUGS
This version of "Net::DNS::RR" does little sanity checking on user-created RR objects. COPYRIGHT
Copyright (c) 1997-2002 Michael Fuhr. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. EDNS0 extensions by Olaf Kolkman. SEE ALSO
perl(1), Net::DNS, Net::DNS::Resolver, Net::DNS::Packet, Net::DNS::Update, Net::DNS::Header, Net::DNS::Question, RFC 1035 Section 4.1.3 perl v5.8.0 2002-10-14 Net::DNS::RR(3)