oss-security - Re: DNS vulnerability: other relevant software

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 9 Jul 2008 19:21:03 +0200
From: Robert Buchholz <rbu@...too.org>
To: oss-security@...ts.openwall.com
Cc: Matthias Geerdsen <vorlon@...too.org>
Subject: Re: DNS vulnerability: other relevant software

On Wednesday 09 July 2008, Matthias Geerdsen wrote:
> - pdnsd [4]:
> 	no info yet

Quoting from http://members.home.nl/p.a.rombouts/pdnsd/doc.html :

query_port_start=number;
...
In case a query start port is given pdnsd uses this port as the first 
port of a specified port range (see query_port_end) used for queries. 
pdnsd will try to randomly select a free port from this range as local 
port for the query.
...

The sample configuration file that is shipped does not have this option 
set, the default value of this is "0". I can't currently test this on a 
kernel that does not randomize by default, so this domaind supports 
randomization, and *seems* to have it enabled by default.

Robert

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.