Re: Named Config Files

Aveek Datta (MoNoLiTH+@CMU.EDU)
Tue, 22 Jul 1997 23:01:53 -0400

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Austin Schutz: "Expect security vulnerability (fwd)"
Previous message: Aleph One: "HPSBUX9707-066 Security Vulnerability with rlogin"
Maybe in reply to: Gus Huber: "Named Config Files"

Excerpts from internet.computing.bugtraq: 22-Jul-97 Named Config Files
by Gus Huber@PBX.ORG
> just noticed something the otherday that made me think twice about alloing
> my users to modify the named files for their domains...

There are easier ways to crash BIND if you are allowed to dynamic
update it. Deleting a record, adding it back, and then deleting it
again in one update packet crashes BIND, or so I've had reported to me
by the guy who does that sort of thing.

Network Administrator, Monolith Internet Services [TM] _ _ _ _ Aveek
SysAdmin, Carnegie Mellon Univ ITC _ __ ___ _ _ ___| (_) |_| |_Datta
Personal Website @ datta.ml.org _| ' \/ _ \ ' \/ _ \ | | _| ' \ _
All opinions are ONLY mine. (_)_|_|_\___/_||_\___/_|_|\__|_||_(_)
[Get a free domain for your website or machine at http://www.ml.org]

Next message: Austin Schutz: "Expect security vulnerability (fwd)"
Previous message: Aleph One: "HPSBUX9707-066 Security Vulnerability with rlogin"
Maybe in reply to: Gus Huber: "Named Config Files"