bugtraq - RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <096A04F511B7FD4995AE55F13824B833212968@banneretcs1.local.banneretcs.com>
Date: Tue, 17 Apr 2007 12:48:04 -0400
From: "Roger A. Grimes" <roger@...neretcs.com>
To: "Makoto Shiotsuki" <shio@...rim.or.jp>
Cc: <bugtraq@...urityfocus.com>
Subject: RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing

How does BIND stop this sort of attack? 

Can a BIND expert respond?

Roger

*****************************************************************
*Roger A. Grimes, InfoWorld, Security Columnist 
*CPA, CISSP, MCSE: Security (2000/2003/MVP), CEH, yada...yada...
*email: roger_grimes@...oworld.com or roger@...neretcs.com
*Author of Professional Windows Desktop and Server Hardening (Wrox)
*http://www.amazon.com/gp/product/0764599909
*****************************************************************

-----Original Message-----
From: Makoto Shiotsuki [mailto:shio@...rim.or.jp] 
Sent: Tuesday, April 17, 2007 12:31 PM
To: Roger A. Grimes
Cc: bugtraq@...urityfocus.com
Subject: Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing

>One question.  Is BIND any better at preventing this type of attack? 

As far as I know, this vulnerability is specific to the Windows DNS.

Makoto Shiotsuki