openSUSE Forums > Tech News > SUSE Security Announcements » bind DNS poisoning attack problems

Go Back   openSUSE Forums > Tech News > SUSE Security Announcements
Forums FAQ Members List Search Today's Posts Mark Forums Read


SUSE Security Announcements Important openSUSE/Novell security bulletins

Reply
Page 1 of 2 1 2
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 11-Jul-2008, 11:10
forumsadmin's Avatar
Brainless Posting Bot
 
Join Date: Jun 2007
Posts: 474
forumsadmin has disabled reputation
Exclamation bind DNS poisoning attack problems

bind DNS poisoning attack problems


11 July 2008

More...
Reply With Quote
  #2 (permalink)  
Old 11-Jul-2008, 18:05
Flux Capacitor Penguin
 
Join Date: Jun 2008
Location: GMT+10
Posts: 5,232
ken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud of
Default Re: bind DNS poisoning attack problems

There's a DNS vulnerability checker (right hand side of page) at DoxPara Research

Note that your DNS server is probably not yours. If you were running a nameserver, you would probably know it. If the nameserver is not yours, it's probably your ISP's and you should poke them to plug the hole if they haven't done it already.
Reply With Quote
  #3 (permalink)  
Old 18-Jul-2008, 10:19
Puzzled Penguin
 
Join Date: Jul 2008
Posts: 6
tonyfggi hasn't been rated much yet
Default Re: bind DNS poisoning attack problems

So is there any updates coming for OpenSuse 10.1 or has support ended already? I didn't see it on the list.

Thanks,

Tony
Reply With Quote
  #4 (permalink)  
Old 18-Jul-2008, 17:23
Flux Capacitor Penguin
 
Join Date: Jun 2008
Location: GMT+10
Posts: 5,232
ken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud of
Default Re: bind DNS poisoning attack problems

Try running YaST on 10.1, you will see some updates for bind.
Reply With Quote
  #5 (permalink)  
Old 22-Jul-2008, 08:24
Puzzled Penguin
 
Join Date: Jul 2008
Posts: 6
tonyfggi hasn't been rated much yet
Default Re: bind DNS poisoning attack problems

Quote:
Originally Posted by ken_yap View Post
Try running YaST on 10.1, you will see some updates for bind.
I've some problems with yast right now... It uses too much memory.

I just hoped there would be rpm's laying around somewhere.
Reply With Quote
  #6 (permalink)  
Old 22-Jul-2008, 11:45
malcolmlewis's Avatar
Global Moderator
 
Join Date: Jun 2008
Location: Podunk
Posts: 4,701
malcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputation
Default Re: bind DNS poisoning attack problems

On Tue, 22 Jul 2008 13:26:03 GMT
tonyfggi <tonyfggi@no-mx.forums.opensuse.org> wrote:

>
> ken_yap;1841698 Wrote:
> > Try running YaST on 10.1, you will see some updates for bind.

>
> I've some problems with yast right now... It uses too much memory.
>
> I just hoped there would be rpm's laying around somewhere.
>
>

Hi
Nothing here?
http://en.opensuse.org/Package_Repositories#Update

Try running yast CLI version?

--
Cheers Malcolm °¿° (Linux Counter #276890)
SLED 10 SP2 i586 Kernel 2.6.16.60-0.25-default
up 5:38, 2 users, load average: 0.42, 0.81, 0.79
GPU GeForce Go 6600 TE/6200 TE Version: 173.14.09

Reply With Quote
  #7 (permalink)  
Old 23-Jul-2008, 06:53
Puzzled Penguin
 
Join Date: Jul 2008
Posts: 6
tonyfggi hasn't been rated much yet
Default Re: bind DNS poisoning attack problems

I don't even have gui installed so i'm already using cli-version. Also i've already checked that link and 10.1 doesn't have updates regarding this DNS issue.
Reply With Quote
  #8 (permalink)  
Old 23-Jul-2008, 06:55
Puzzled Penguin
 
Join Date: Jul 2008
Posts: 6
tonyfggi hasn't been rated much yet
Default Re: bind DNS poisoning attack problems

I'll keep on looking, but meantime use opendns
Reply With Quote
  #9 (permalink)  
Old 23-Jul-2008, 07:06
Flux Capacitor Penguin
 
Join Date: Jun 2008
Location: GMT+10
Posts: 5,232
ken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud of
Default Re: bind DNS poisoning attack problems

Quote:
Originally Posted by tonyfggi View Post
I don't even have gui installed so i'm already using cli-version. Also i've already checked that link and 10.1 doesn't have updates regarding this DNS issue.
But that update RPM must have come from somewhere so I would look at the update repositories for recent packages. Also have you tried the ncurses yast? That's what I used, as I was using ssh.
Reply With Quote
  #10 (permalink)  
Old 23-Jul-2008, 07:15
malcolmlewis's Avatar
Global Moderator
 
Join Date: Jun 2008
Location: Podunk
Posts: 4,701
malcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputationmalcolmlewis has great reputation
Default Re: bind DNS poisoning attack problems

On Wed, 23 Jul 2008 11:56:03 GMT
tonyfggi <tonyfggi@no-mx.forums.opensuse.org> wrote:

>
> I don't even have gui installed so i'm already using cli-version. Also
> i've already checked that link and 10.1 doesn't have updates regarding
> this DNS issue.
>
>

Hi
Have you tried a later release 10.2/10.3 and getting the src rpm and
building it?
rpmbuild --rebuild <name_of_source_rpm>

--
Cheers Malcolm °¿° (Linux Counter #276890)
SLED 10 SP2 i586 Kernel 2.6.16.60-0.25-default
up 0:52, 1 user, load average: 0.16, 0.55, 0.59
GPU GeForce Go 6600 TE/6200 TE Version: 173.14.09

Reply With Quote
Reply
Page 1 of 2 1 2

Bookmarks


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2