Bugtraq mailing list archives

root name server corruption, denial of service prob


From: mooks () gravity science gmu edu (Mark)
Date: Thu, 21 Jul 1994 07:51:33 -0400 (EDT)


I was told that internic database had a corruption, someone fell asleep on
their keyboard or something, anyway point is there are inaccurate records
in there that need to be fixed up. I fyou depend on reverse lookups not
lying to allow acces then you can get a denial of service.

Restarting your nameserver should fix things, but if your BIND is pre 4.9
then it might be harder to get rid of the problems. It'd be a good idea to
upgrade asap to BIND 4.9.2-940221. This should fix any refresh probs.

There is another vunrability in the root nameserver setup that makes it
possible to create denial of service at will, this is being looked into.
See Paul Vixie for more details.

Cheers,
Mark
mark () netsys com



Current thread: