Vulnerability Development mailing list archives

Re: Possible DOS in Bind 8.2.2-P5


From: Luke Dudney <luke.dudney () WESTNET COM AU>
Date: Fri, 10 Nov 2000 09:11:57 +0800

-----Original Message-----
From: Fabio Pietrosanti (naif) [mailto:fabio () TELEMAIL IT]
Sent: Wednesday, November 08, 2000 2:57 AM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Possible DOS in Bind 8.2.2-P5


Hi,
playing with bind and ZXFR feature ( zone transfer compressed
with a possible insecure
execlp("gzip", "gzip", NULL); ), i discovered a Denial Of
Service against Bind 8.2.2-P5 .


Crashed bind-8.2.2-P6 (?) from ports on OpenBSD2.7/sparc


Current thread: