Bugtraq mailing list archives
Re: Named Config Files
From: MoNoLiTH+ () CMU EDU (Aveek Datta)
Date: Tue, 22 Jul 1997 23:01:53 -0400
Excerpts from internet.computing.bugtraq: 22-Jul-97 Named Config Files by Gus Huber () PBX ORG
just noticed something the otherday that made me think twice about alloing my users to modify the named files for their domains...
There are easier ways to crash BIND if you are allowed to dynamic update it. Deleting a record, adding it back, and then deleting it again in one update packet crashes BIND, or so I've had reported to me by the guy who does that sort of thing. Network Administrator, Monolith Internet Services [TM] _ _ _ _ Aveek SysAdmin, Carnegie Mellon Univ ITC _ __ ___ _ _ ___| (_) |_| |_Datta Personal Website @ datta.ml.org _| ' \/ _ \ ' \/ _ \ | | _| ' \ _ All opinions are ONLY mine. (_)_|_|_\___/_||_\___/_|_|\__|_||_(_) [Get a free domain for your website or machine at http://www.ml.org]
Current thread:
- better snprintf replacement, anyone? Theo de Raadt (Jul 19)
- Re: better snprintf replacement, anyone? Steve \ (Jul 21)
- Re: better snprintf replacement, anyone? Manoj Kasichainula (Jul 21)
- Re: better snprintf replacement, anyone? Theo de Raadt (Jul 21)
- Re: better snprintf replacement, anyone? Alan Cox (Jul 22)
- Re: better snprintf replacement, anyone? James Bonfield (Jul 22)
- ld.so vulnerability Aleph One (Jul 22)
- Security hole in exim 1.62: local root exploit Aleph One (Jul 22)
- Re: Security hole in exim 1.62: local root exploit Warner Losh (Jul 22)
- Named Config Files Gus Huber (Jul 22)
- Re: Named Config Files Aveek Datta (Jul 22)
- Re: better snprintf replacement, anyone? Steve \ (Jul 21)
- <Possible follow-ups>
- Re: better snprintf replacement, anyone? Bill Rugolsky Jr. (Jul 22)
- Re: better snprintf replacement, anyone? Casper Dik (Jul 23)
- Re: better snprintf replacement, anyone? der Mouse (Jul 22)
- Re: better snprintf replacement, anyone? Sten Gunterberg (Jul 22)
- Re: better snprintf replacement, anyone? Peter Jeremy (Jul 22)
- Re: better snprintf replacement, anyone? Theo de Raadt (Jul 22)
- Re: better snprintf replacement, anyone? der Mouse (Jul 22)