full-disclosure - Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 10 Aug 2008 12:51:48 -0500
From: Paul Schmehl <pschmehl_lists@...rr.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Emergency DNS Patch Still Vulnerable,
 Proves Russian Physicist

--On Sunday, August 10, 2008 12:25 AM -0400 Valdis.Kletnieks@...edu wrote:

> On Sat, 09 Aug 2008 20:59:15 BST, n3td3v said:
>> Reports coming out of blog land and onto n3td3v - Google Groups:
>>
>> Emergency DNS Patch Still Vulnerable, Proves Russian Physicist
>
> *yawn*.  It was already *known* that even after patching, the
> vulnerability was still there.  All the port-randomization stuff did was
> make it an order of 64K or so harder to exploit.  That's why DNSSEC was
> recommended as the *real* fix for this problem.
>

The Russian scientist's proof was a 10 hour sustained attack involving 
130,000 queries and 4-5k spoofed responses per query.  Surely even n3td3v 
would notice more than 520,000,000 dns packets coming in?

Paul Schmehl
As if it wasn't already obvious,
my opinions are my own and not
those of my employer.

Content of type "application/pkcs7-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/