oss-security - Re: DNS vulnerability: other relevant software

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 10 Jul 2008 16:27:33 +0200
From: Thomas Biege <thomas@...e.de>
To: oss-security@...ts.openwall.com
Subject: Re: DNS vulnerability: other relevant software

> - dnsmasq [2]:
> 	no port randomization [3]
dnsmasq is a simple forwarder AFAIK threfore it should not be vulnerable.
the author told me he will add TRXID and port randomization...

> - pdnsd [4]:
> 	no info yet

powerdns-recursor uses port randomization with a better
PRNG than glibc rand() since version 3.1.6.

-- 
Bye,
     Thomas
-- 
 Thomas Biege <thomas@...e.de>, SUSE LINUX, Security Support & Auditing
 SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
-- 
           Hamming's Motto:
           The purpose of computing is insight, not numbers.
                                -- Richard W. Hamming

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.