Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-Id: <5.2.0.9.2.20030303215029.02dda4a0@pop3.cris.com>
X-Sender: rrschulz AT pop3 DOT cris DOT com
Date: Mon, 03 Mar 2003 21:53:04 -0800
To: cygwin AT cygwin DOT com
From: Randall R Schulz <rrschulz AT cris DOT com>
Subject: Re: why is bash trying to access my DNS?
In-Reply-To: <1046755222.23310.37.camel@milo>
References: <5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303205644 DOT 02eeb590 AT pop3 DOT cris DOT com>
 <5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303194254 DOT 02a82a30 AT pop3 DOT cris DOT com>
 <ARRAY(0x9d0fa5c)>
 <5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303194254 DOT 02a82a30 AT pop3 DOT cris DOT com>
 <5 DOT 2 DOT 0 DOT 9 DOT 2 DOT 20030303205644 DOT 02eeb590 AT pop3 DOT cris DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

David,

At 21:20 2003-03-03, David Means wrote:
>On Mon, 2003-03-03 at 23:59, Randall R Schulz wrote:
> > Geoffrey,
> >
> > ...
> >
> > Oops. I mean what data can sneakily be sent via a DNS request?
> >
> > Randall Schulz
>
>Actually, plenty.  Historically, Bind has been easily 
>hacked.  Although it's been a while since a good vulnerability was 
>found in Bind, that doesn't mean there's not an unknown hole in it 
>which could be exploited.

Please be specific. What information can be elicited by the DNS server 
from the DNS client when the client makes a DNS request?

I really think there are more important things to worry about, but I'd 
like to learn how I might be wrong.


>--
>David Means


Randall Schulz 


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/