Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

TalkBack 7 of 26:

Next »

« Previous

• Thread View
• Flat View

Re: Are private DNS servers exploitable?

Your scenario is not exploitable with the current code, because it is not possible to directly feed requests to your internal DNS server. Your setup is actually similar to most corporate setups, just on a smaller and less complex scale.

Extensions of the current code could be made where requests weren't made directly via the metasploit framework, but where your browser/email-client/etc is forced to make a large number of requests on your behalf. This could be done by getting you to click a malicious link or by you visiting a legit but hijacked website (either XSS bug or full control).

Depending on how your NAT router is setup will depend if you are vulnerable in that case or not.

Corporations have to worry about this because there are still many, many ways to kick-off DNS requests from the inside, through email servers, database servers, web functionality, etc etc.

Posted by: natron_   Posted on: 07/24/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now