Bugtraq mailing list archives
Re: Exploiting Microsoft dynamic Dns updates
From: Denis Jedig <dj () syneticon de>
Date: Tue, 3 Apr 2007 09:55:15 +0200
On Thu, 22 Mar 2007 11:35:18 +0100 Andres Tarasco wrote:
By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records.
This statement is way too broad. Creating an AD-integrated zone in Windows Server 2003 does create a "secure updates only" zone by default. You can influence this behavior in the zone creation wizard though.
dnsfun exploits that weak configuration and allows remote users to modify dns records.
I am not sure if I do see the point in rewriting nsupdate from bindtools. I am also quite uncertain if this really might count as a "hacker" or "security" tool of any kind. -- Denis Jedig syneticon networks GbR http://syneticon.net/service/
Current thread:
- Re: Exploiting Microsoft dynamic Dns updates Denis Jedig (Apr 03)