[4992] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Named Config Files

daemon@ATHENA.MIT.EDU (Aveek Datta)
Tue Jul 22 23:39:48 1997

Date: 	Tue, 22 Jul 1997 23:01:53 -0400
Reply-To: Aveek Datta <MoNoLiTH+@CMU.EDU>
From: Aveek Datta <MoNoLiTH+@CMU.EDU>
X-To:         bugtraq@crimelab.com
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <v02130500affac33f4c38@[192.168.1.100]>

Excerpts from internet.computing.bugtraq: 22-Jul-97 Named Config Files
by Gus Huber@PBX.ORG
> just noticed something the otherday that made me think twice about alloing
> my users to modify the named files for their domains...

There are easier ways to crash BIND if you are allowed to dynamic
update it. Deleting a record, adding it back, and then deleting it
again in one update packet crashes BIND, or so I've had reported to me
by the guy who does that sort of thing.

  Network Administrator, Monolith Internet Services [TM]  _ _ _   _  Aveek
  SysAdmin, Carnegie Mellon Univ ITC   _ __  ___ _ _  ___| (_) |_| |_Datta
  Personal Website @ datta.ml.org    _| '  \/ _ \ ' \/ _ \ | |  _| ' \ _
  All opinions are ONLY mine.       (_)_|_|_\___/_||_\___/_|_|\__|_||_(_)
  [Get a free domain for your website or machine at http://www.ml.org]

home help back first fref pref prev next nref lref last post