Full Disclosure mailing list archives
Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
From: Valdis.Kletnieks () vt edu
Date: Sun, 10 Aug 2008 00:25:06 -0400
On Sat, 09 Aug 2008 20:59:15 BST, n3td3v said:
Reports coming out of blog land and onto n3td3v - Google Groups: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
*yawn*. It was already *known* that even after patching, the vulnerability was still there. All the port-randomization stuff did was make it an order of 64K or so harder to exploit. That's why DNSSEC was recommended as the *real* fix for this problem.
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Emergency DNS Patch Still Vulnerable, Proves Russian Physicist n3td3v (Aug 09)
- Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist Valdis . Kletnieks (Aug 09)
- Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist Paul Schmehl (Aug 10)
- Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist Valdis . Kletnieks (Aug 09)