OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Sep) 1994: root name server corruption, denial of service prob

root name server corruption, denial of service prob

Mark (mooksgravity.science.gmu.edu)
Thu, 21 Jul 1994 07:51:33 -0400 (EDT) 

I was told that internic database had a corruption, someone fell asleep on
their keyboard or something, anyway point is there are inaccurate records
in there that need to be fixed up. I fyou depend on reverse lookups not
lying to allow acces then you can get a denial of service.

Restarting your nameserver should fix things, but if your BIND is pre 4.9
then it might be harder to get rid of the problems. It'd be a good idea to
upgrade asap to BIND 4.9.2-940221. This should fix any refresh probs.

There is another vunrability in the root nameserver setup that makes it
possible to create denial of service at will, this is being looked into.
See Paul Vixie for more details.

Cheers,
Mark
marknetsys.com