Bugtraq mailing list archives

Re: Named Config Files


From: MoNoLiTH+ () CMU EDU (Aveek Datta)
Date: Tue, 22 Jul 1997 23:01:53 -0400


Excerpts from internet.computing.bugtraq: 22-Jul-97 Named Config Files
by Gus Huber () PBX ORG
just noticed something the otherday that made me think twice about alloing
my users to modify the named files for their domains...

There are easier ways to crash BIND if you are allowed to dynamic
update it. Deleting a record, adding it back, and then deleting it
again in one update packet crashes BIND, or so I've had reported to me
by the guy who does that sort of thing.

  Network Administrator, Monolith Internet Services [TM]  _ _ _   _  Aveek
  SysAdmin, Carnegie Mellon Univ ITC   _ __  ___ _ _  ___| (_) |_| |_Datta
  Personal Website @ datta.ml.org    _| '  \/ _ \ ' \/ _ \ | |  _| ' \ _
  All opinions are ONLY mine.       (_)_|_|_\___/_||_\___/_|_|\__|_||_(_)
  [Get a free domain for your website or machine at http://www.ml.org]



Current thread: