Archive

Archive for the ‘dns’ Category

Serious vulnerability in BIND DNS server

February 24th, 2011 No comments

L’Internet Systems Consortium (ISC) and US-CERT published a notice of very serious vulnerability , discovered by NeuStar, that affects BIND, which is the most widely used DNS server on the Internet, especially on Unix systems and derivatives, on which is the de facto standard (Source: http://it.wikipedia.org/wiki/BIND).

The exploitation of the vulnerability could allow an attacker to stop all processing on the server BIND requests. According to the notice, ‘When a process has happened with a BIND or a dynamic update IXFR, There is a small window of time during which the IXFR / coupled with an update query may cause a deadlock. This will cause the deadlock interuzzione of all the processes required. A high rate of queries and / or a high refresh rate increases the likelihood of this condition.

Source: tech.slashdot.org

Categories: bind, dns, Internet Tags: , ,