Re: Help DNS cache poisoning

anonymous_at_discussions.microsoft.com
Date: 09/29/04 

Date: Wed, 29 Sep 2004 09:56:59 -0700

>-----Original Message-----
>Tony wrote:
>> We are running a WIN2K server with DNS that was
exploited
>> with DNS cache poisoning. It was trying to redirect our
>> email to another server. We found what appeared to be a
>> fix in the MS knowledgebase article 241352.
><snip
>>
>> When we checked this on the server there was no value in
>> the registry, but when going through the gui the Secure
>> cache against pollution box was checked.
>> Should there also be a registry setting when this check
>> box is enabled?
>> Any ideas how this server could get exploited with this
>> setting enabled?
>
>What inbound ports are open in your firewall?
>>
>> ANy assistance would be greatly appreciated.
>
>open ports are 25 (SMTP) and 23 (Telnet). This server
resides on the DMZ.
>.
>

Relevant Pages

  • Re: DNS Injection Problem
    ... Unless the attacker has access to the wire DNS queries are going over, ... DNS cache poisoning is possible, albeit difficult to implement, ... > I am looking for a vulnerability in my server but it is a hard thing ...
    (Incidents)
  • Re: Help DNS cache poisoning
    ... > with DNS cache poisoning. ... It was trying to redirect our ... > email to another server. ... > Should there also be a registry setting when this check ...
    (microsoft.public.security.virus)
  • Re: Newbie with a smallbiz2000 installation, check my config?
    ... > Windows creates a profile path under Documents & Settings. ... > a folder with that name already exists (maybe a local user with the ... > server, open the properties for this folder, and ensure that you have ... > you redirect key folders from a user's profile to a location on your ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: How to intercept error when httpRuntime maxRequestLength is ex
    ... "Hermit Dave" wrote in message ... > client side javascript and http module which could be helpful.. ... > To redirect the client your server has to send back a response. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Folder Redirection Desktop to multiple servers %HOMESHARE%
    ... Windows server 2003 lets you redirect the desktop to a share (is that what ... BTW if you use DFS without File Replication the data will live only on the ... > which would not work (I dont want to preplicate the traffic and not doing ...
    (microsoft.public.windows.group_policy)