Subject: [Full-disclosure] NISCC DNS Protocol Vulnerability
From: Markus Jansson <[email-masked]>
To: [email-masked]
Date: Fri, 28 Apr 2006 22:59:05 +0300
List-Id: An unmoderated mailing list for the discussion of security issues <full-disclosure.lists.grok.org.uk>

http://www.niscc.gov.uk/niscc/vulnAdv-en.html
"The vulnerabilities described in this advisory affect implementations 
of the Domain Name System (DNS) protocol. Many vendors include support 
for this protocol in their products and may be impacted to varying 
degrees, if at all."

"Impact:
..DoS...memory corruption...stack corruption...buffer overflow exploits"

"Vendors affected:
Cisco, Delegate, Ethereal, Hitachi, ISC, Juniper Networks, MyDNS, pdnsd, 
Sun, Wind River & Microsoft"

Whole stuff in .pdf format
http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en

-- 
ï»¿My computer security & privacy related homepage
http://www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email
before sending it to me to protect our privacy.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/