mirror of
https://github.com/opnsense/src.git
synced 2026-04-25 08:07:28 -04:00
56a78b5211
1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 Approved by: re (kensmith, implicit) |
||
|---|---|---|
| .. | ||
| include/named | ||
| unix | ||
| builtin.c | ||
| client.c | ||
| config.c | ||
| control.c | ||
| controlconf.c | ||
| interfacemgr.c | ||
| listenlist.c | ||
| log.c | ||
| logconf.c | ||
| lwaddr.c | ||
| lwdclient.c | ||
| lwderror.c | ||
| lwdgabn.c | ||
| lwdgnba.c | ||
| lwdgrbn.c | ||
| lwdnoop.c | ||
| lwresd.8 | ||
| lwresd.c | ||
| lwresd.docbook | ||
| lwresd.html | ||
| lwsearch.c | ||
| main.c | ||
| Makefile.in | ||
| named.8 | ||
| named.conf.5 | ||
| named.conf.docbook | ||
| named.conf.html | ||
| named.docbook | ||
| named.html | ||
| notify.c | ||
| query.c | ||
| server.c | ||
| sortlist.c | ||
| tkeyconf.c | ||
| tsigconf.c | ||
| update.c | ||
| xfrout.c | ||
| zoneconf.c | ||