Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates
- From: Denis Jedig <dj@xxxxxxxxxxxx>
- Date: Tue, 3 Apr 2007 09:55:15 +0200
On Thu, 22 Mar 2007 11:35:18 +0100 Andres Tarasco wrote:
By default, most Microsoft DNS servers integrated with active directory allow
insecure dynamic updates for dns records.
This statement is way too broad. Creating an AD-integrated zone in Windows
Server 2003 does create a "secure updates only" zone by default. You can
influence this behavior in the zone creation wizard though.
dnsfun exploits that weak configuration and allows remote users to modify dns records.
I am not sure if I do see the point in rewriting nsupdate from bindtools. I
am also quite uncertain if this really might count as a "hacker" or
"security" tool of any kind.
--
Denis Jedig
syneticon networks GbR http://syneticon.net/service/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Follow-Ups:
- Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates
- From: Andres Tarasco
- Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates
- Prev by Date: Re: [Full-disclosure] Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5]
- Next by Date: [Full-disclosure] another .ani 0-day bug third party patcher more usefull this time, version 0.2
- Previous by thread: [Full-disclosure] Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5]
- Next by thread: Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates
- Index(es):
Relevant Pages
|
