full-disclosure - Re: DNS Pointer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 4 Dec 2010 12:12:42 +0530
From: Srinivas Naik <naik.srinu@...il.com>
To: Florian Weimer <fweimer@....de>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: DNS Pointer - DoS Exploit

Thanks for the input Mr. Weimer

I am planning to trigger this exploit and wandering how to construct such a
packet.

Ultimate goal is to make a client request which can cause this effect. If
possible, scripting ideas would be helpful.

Cheers,
Naik

On Fri, Dec 3, 2010 at 10:22 PM, Florian Weimer <fweimer@....de> wrote:

> * Srinivas Naik:
>
> > A DNS packet with a pointer loop is a protocol anomaly which some
> programs
> > may not handle gracefully.
>
> Try this:
>
> 00 00 00 00 00 01 00 00 00 00 00 00 C0 0C
>
> --
> Florian Weimer                <fweimer@....de>
> BFK edv-consulting GmbH       http://www.bfk.de/
> Kriegsstraße 100              tel: +49-721-96201-1
> D-76133 Karlsruhe             fax: +49-721-96201-99
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/