Re: djbdns misformats some long response packets; patch and example attack

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: djbdns misformats some long response packets; patch and example attack
From: Matthew Dempsky <matthew@xxxxxxxxxxx>
Date: Wed, 4 Mar 2009 22:05:24 -0800
In-reply-to: <d791b8790902261534h2f5ea65k35c940f3166293b@xxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <d791b8790902261534h2f5ea65k35c940f3166293b@xxxxxxxxxxxxxx>

As a final update to this thread: Dan Bernstein acknowledged this bug
as a security hole in djbdns and recommends that users install my
patch.  A copy of his post is available at
http://marc.info/?l=djbdns&m=123613000920446&w=2.

References:
- djbdns misformats some long response packets; patch and example attack
  - From: Matthew Dempsky

Prev by Date: CelerBB 0.0.2 Multiple Vulnerabilities
Next by Date: Re: iDefense COMRaider 'DeleteFile()' Method Arbitrary File Deletion Vulnerability
Previous by thread: Re: djbdns misformats some long response packets; patch and example attack
Next by thread: [ MDVSA-2009:058 ] wireshark
Index(es):
- Date
- Thread