[169764] in North American Network Operators' Group
Re: new DNS forwarder vulnerability
daemon@ATHENA.MIT.EDU (Merike Kaeo)
Fri Mar 14 12:06:16 2014
From: Merike Kaeo <merike@doubleshotsecurity.com>
In-Reply-To: <20140314140656.GA1703@nic.fr>
Date: Fri, 14 Mar 2014 09:05:00 -0700
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_5BB921DC-05C3-4633-AFD6-F34356F0560C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On Mar 14, 2014, at 7:06 AM, Stephane Bortzmeyer <bortzmeyer@nic.fr> =
wrote:
> On Fri, Mar 14, 2014 at 01:59:27PM +0000,
> Nick Hilliard <nick@foobar.org> wrote=20
> a message of 10 lines which said:
>=20
>> did you characterise what dns servers / embedded kit were
>> vulnerable?
>=20
> He said "We have not been able to nail this vulnerability down to a
> single box or manufacturer" so it seems the answer is No.
It is my understanding that many CPEs work off of same reference =
implementation(s). I haven't
had any cycles for this but with all the CPE issues out there it would =
be interesting to have
a matrix of which CPEs utilize which reference implementation. That may =
start giving some clues.
Has someone / is someone doing this?
- merike
--Apple-Mail=_5BB921DC-05C3-4633-AFD6-F34356F0560C
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBCgAGBQJTIyisAAoJEA7gPO9LJuah/9wH/39vWltx1UfA4gvdibt3ln/A
TDvYUW6t8aYDjjjTUSLa8K+pP43+35fUTIapgRGyittMBSGXfKN9+tXjoJq1d75t
MIJRn0vCUpw8RJUHgy4KwyFV5xbtsF1obDWGbjvoTKrn+64GWeH9oxpqkFZSe8np
sBx6lmE2NJSeHjLUenEBV46R5lO3LLiiMPvmulM3tLnLxEC2ysu1iHZRx5PKs+M1
gnbtnmrmURvU0L2DAfQ37RZmrDTj+UbpDLyA+/4RXDqjMF8oWdspehxpxxY+0X1E
+72hsHlZe/edVEdOhW+gBHyFdumOodtFhKQnmaWL2BQffOpelgu+ZhMloKnXhDo=
=8a40
-----END PGP SIGNATURE-----
--Apple-Mail=_5BB921DC-05C3-4633-AFD6-F34356F0560C--
