Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Message-Id: <5.2.0.9.2.20030303215029.02dda4a0@pop3.cris.com>
X-Sender: rrschulz@pop3.cris.com
Date: Mon, 03 Mar 2003 21:53:04 -0800
To: cygwin@cygwin.com
From: Randall R Schulz <rrschulz@cris.com>
Subject: Re: why is bash trying to access my DNS?
In-Reply-To: <1046755222.23310.37.camel@milo>
References: <5.2.0.9.2.20030303205644.02eeb590@pop3.cris.com>
 <5.2.0.9.2.20030303194254.02a82a30@pop3.cris.com>
 <ARRAY(0x9d0fa5c)>
 <5.2.0.9.2.20030303194254.02a82a30@pop3.cris.com>
 <5.2.0.9.2.20030303205644.02eeb590@pop3.cris.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

David,

At 21:20 2003-03-03, David Means wrote:
>On Mon, 2003-03-03 at 23:59, Randall R Schulz wrote:
> > Geoffrey,
> >
> > ...
> >
> > Oops. I mean what data can sneakily be sent via a DNS request?
> >
> > Randall Schulz
>
>Actually, plenty.  Historically, Bind has been easily 
>hacked.  Although it's been a while since a good vulnerability was 
>found in Bind, that doesn't mean there's not an unknown hole in it 
>which could be exploited.

Please be specific. What information can be elicited by the DNS server 
from the DNS client when the client makes a DNS request?

I really think there are more important things to worry about, but I'd 
like to learn how I might be wrong.


>--
>David Means


Randall Schulz 


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

