Vulnerability Development mailing list archives

Re: icq 2000 ads


From: Shoten <shoten () starpower net>
Date: Fri, 23 Feb 2001 11:14:29 -0500

An forged host entry (host.) would be enough to redirect the url access
to an forged reg upd. Still this would require the attacker to already
have breached the system.

or to have control over the DNS used by that system

Or to poison DNS used by that system (attacker upstream or on local net).


Current thread: