Re: [Full-disclosure] Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
- From: Paul Schmehl <pschmehl_lists@xxxxxxxxx>
- Date: Sun, 10 Aug 2008 12:51:48 -0500
--On Sunday, August 10, 2008 12:25 AM -0400 Valdis.Kletnieks@xxxxxx wrote:
On Sat, 09 Aug 2008 20:59:15 BST, n3td3v said:Reports coming out of blog land and onto n3td3v - Google Groups:
Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
*yawn*. It was already *known* that even after patching, the
vulnerability was still there. All the port-randomization stuff did was
make it an order of 64K or so harder to exploit. That's why DNSSEC was
recommended as the *real* fix for this problem.
The Russian scientist's proof was a 10 hour sustained attack involving 130,000 queries and 4-5k spoofed responses per query. Surely even n3td3v would notice more than 520,000,000 dns packets coming in?
As if it wasn't already obvious,
my opinions are my own and not
those of my employer.
Description: S/MIME cryptographic signature
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Prev by Date: Re: [Full-disclosure] Internet justice delivered [UPDATE ON M. ROTHMAN AND ALAN]
- Next by Date: [Full-disclosure] [SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk
- Previous by thread: Re: [Full-disclosure] Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
- Next by thread: [Full-disclosure] [ GLSA 200808-10 ] Adobe Reader: User-assisted execution of arbitrary code