[30476] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: g.root-servers.net returns NXDOMAIN for com.

daemon@ATHENA.MIT.EDU (Josh Richards)
Tue Aug 8 13:32:25 2000

Date: Tue, 8 Aug 2000 10:09:37 -0700
From: Josh Richards <jrichard@cubicle.net>
To: North America Network Operators Group Mailing List <nanog@merit.edu>
Message-ID: <20000808100937.A31827@datahaven.freedom.gen.ca.us>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="VS++wcV0S1rZb1Fb"
Content-Disposition: inline
In-Reply-To: <20000805005230.097F28B@proven.weird.com>; from woods@weird.com on Fri, Aug 04, 2000 at 08:52:30PM -0400
Errors-To: owner-nanog-outgoing@merit.edu



--VS++wcV0S1rZb1Fb
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Greg A. Woods <woods@weird.com> [20000804 17:35]:
[..]=20
> Assuming this isn't a spoofed reply, it may give some indication as to
> the source of the problems it had though:
>=20
> 	$ host -t txt -c ch version.bind g.root-servers.net
> 	VERSION.BIND            TXT     "8.1.2-P2"
[..]

host -t txt -c ch version.bind <server> results:

a.root-servers.net      VERSION.BIND            TXT     "8.1.2"
b.root-servers.net      VERSION.BIND            TXT     "8.2.2-P5"
c.root-servers.net      VERSION.BIND            TXT     "8.2.2-P5"
d.root-servers.net      VERSION.BIND            TXT     "8.2.2-P5"
e.root-servers.net      VERSION.BIND            TXT     "8.2.3-T5B"
f.root-servers.net      (not responding)
g.root-servers.net      VERSION.BIND            TXT     "8.1.2-P2"

I understand the usefulness of version (and *cough* platform *cough*)=20
diversity, but presuming these are correct, isn't the 'a' root vulnerable t=
o=20
several exploits, and 'g' likely as well? Although 8.1.2-P2 may be a custom=
=20
(fixed?) build since I've never seen/heard of a patchlevel 2 for 8.1.2, onl=
y=20
8.2.2 (but I may just have missed it).

-jr

----
Josh Richards [JTR38/JR539-ARIN]
<jrichard@cubicle.net/fix.net/freedom.gen.ca.us/geekresearch.com>
Geek Research LLC
IP Network Engineering and Consulting

--VS++wcV0S1rZb1Fb
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjmQPr0ACgkQ8VgqD3XNPNVQzgCfd6EfTjE8PBNfPdKvm/rj4iI/
xdMAn0GMeEZ7PJfMSkLltRgIX32MNyYT
=VJ3m
-----END PGP SIGNATURE-----

--VS++wcV0S1rZb1Fb--


home help back first fref pref prev next nref lref last post