bugtraq - Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 06 Oct 2007 11:45:21 +0200
From: Amit Klein <aksecurity@...il.com>
To: sathyakrishnadas@...il.com
Cc: bugtraq@...urityfocus.com
Subject: Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)

sathyakrishnadas@...il.com wrote:
> hi,
> I tried to generate query ids by using the perl script provided by you in the "Appendix B – Attack script for NSID_SHUFFLE_ONLY algorithm" 
> found on the following webpage. But I see some syntax errors in the code. 
Replying to the list as well now...

Yep, sorry about that, and thanks for noticing. It appears the HTML 
version of the paper has few lines of script missing from Appendix B. 
I'll have that fixed ASAP. Meanwhile, you can use the PDF version of the 
paper (http://www.trusteer.com/docs/BIND_8_DNS_Cache_Poisoning.pdf), it 
looks OK.

Good luck, and let me know if you need further assistance,
-Amit