[4992] in bugtraq
Re: Named Config Files
daemon@ATHENA.MIT.EDU (Aveek Datta)
Tue Jul 22 23:39:48 1997
Date: Tue, 22 Jul 1997 23:01:53 -0400
Reply-To: Aveek Datta <MoNoLiTH+@CMU.EDU>
From: Aveek Datta <MoNoLiTH+@CMU.EDU>
X-To: bugtraq@crimelab.com
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <v02130500affac33f4c38@[192.168.1.100]>
Excerpts from internet.computing.bugtraq: 22-Jul-97 Named Config Files
by Gus Huber@PBX.ORG
> just noticed something the otherday that made me think twice about alloing
> my users to modify the named files for their domains...
There are easier ways to crash BIND if you are allowed to dynamic
update it. Deleting a record, adding it back, and then deleting it
again in one update packet crashes BIND, or so I've had reported to me
by the guy who does that sort of thing.
Network Administrator, Monolith Internet Services [TM] _ _ _ _ Aveek
SysAdmin, Carnegie Mellon Univ ITC _ __ ___ _ _ ___| (_) |_| |_Datta
Personal Website @ datta.ml.org _| ' \/ _ \ ' \/ _ \ | | _| ' \ _
All opinions are ONLY mine. (_)_|_|_\___/_||_\___/_|_|\__|_||_(_)
[Get a free domain for your website or machine at http://www.ml.org]