Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-Id:	<5.2.0.9.2.20030303215029.02dda4a0@pop3.cris.com>
X-Sender:	rrschulz AT pop3 DOT cris DOT com
Date:	Mon, 03 Mar 2003 21:53:04 -0800
To:	cygwin AT cygwin DOT com
From:	Randall R Schulz <rrschulz AT cris DOT com>
Subject:	Re: why is bash trying to access my DNS?
In-Reply-To:	<1046755222.23310.37.camel@milo>
References:	<5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303205644 DOT 02eeb590 AT pop3 DOT cris DOT com>
	<5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303194254 DOT 02a82a30 AT pop3 DOT cris DOT com>
	<ARRAY(0x9d0fa5c)>
	<5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303194254 DOT 02a82a30 AT pop3 DOT cris DOT com>
	<5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303205644 DOT 02eeb590 AT pop3 DOT cris DOT com>
Mime-Version:	1.0

David,

At 21:20 2003-03-03, David Means wrote:
>On Mon, 2003-03-03 at 23:59, Randall R Schulz wrote:
> > Geoffrey,
> >
> > ...
> >
> > Oops. I mean what data can sneakily be sent via a DNS request?
> >
> > Randall Schulz
>
>Actually, plenty.  Historically, Bind has been easily 
>hacked.  Although it's been a while since a good vulnerability was 
>found in Bind, that doesn't mean there's not an unknown hole in it 
>which could be exploited.

Please be specific. What information can be elicited by the DNS server 
from the DNS client when the client makes a DNS request?

I really think there are more important things to worry about, but I'd 
like to learn how I might be wrong.


>--
>David Means


Randall Schulz 


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -