RE: bind9 crash

["Trent Williams" <twilliams () regionsix com>]

Isn't "small ddos" an oxymoron? Guess it depends how small the
distribution is... ;)

What exact bind version? If you're looking for a specific dos vuln then
the version will matter. A malformed packet will probably be your best
bet. Did you try searching for it?

http://www.google.com/search?q=bind9+dos&ie=utf-8&oe=utf-8&aq=t&rls=org.
mozilla:en-US:official&client=firefox-a


Regards, 

Trent Williams
Systems Administrator/ISO
Region 6 Behavioral Health

This email is property of Region 6 Behavioral Healthcare. Any
information within this email or attached to this email is considered
confidential. This email is not to be forwarded, copied, or reproduced
in any way without the proper consent of Region 6 Behavioral Healthcare.


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Ron Gutierrez
Sent: Thursday, July 10, 2008 11:46 AM
To: pen-test () securityfocus com
Subject: bind9 crash

I'm working on a project that requires me to find some ways to cause 
mayhem to a network.
I'm trying to knock down a bind9 server and so far have been 
unsuccessful. I'm running it on a server with 64 mb ram so that 
hopefully that would make it easier to knock down with a small ddos 
attack but so far its only taking up 6 percent of the memory with the 
amount queries I've been throwing at.

I'm not much a DNS guy. Do any of you guys know any bad bind 
configurations that could cause it to perform terribly to the point that

it'll crash.
Also If you know any for bind8 I could always switch to that. Thanks

-- 
Ron Gutierrez


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------