Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
djbdns misformats some long response packets; patch and example attack
Feb 26 2009 11:34PM
Matthew Dempsky (matthew dempsky org)
The DNS packet format allows names to be compressed by replacing the
suffix of a name with an encoded offset to another location in the
packet where the suffix already exists. Because of the encoding
scheme, valid offsets are limited to < 16384.
In djbdns 1.05, response.c handles name compression....
[ more ]
Copyright 2010, SecurityFocus