[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Five Ways to Screw Up SSL

To: Dude VanWinkle <dudevanwinkle@xxxxxxxxx>
Subject: Re: [Full-disclosure] Five Ways to Screw Up SSL
From: Valdis.Kletnieks@xxxxxx
Date: Mon, 22 May 2006 12:13:44 -0400

On Mon, 22 May 2006 12:02:23 EDT, Dude VanWinkle said:

> DNS foo to the client, how easy is that? Would you have to get the
> upstream DNS server to  cache your bogus entry?

You'd be *amazed* how many are still running BIND 4 or 8....

Attachment: pgpbnYwWbzdoh.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Brian Dessent

References:
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Michal Zalewski
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Ginsu Rabbit
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Dude VanWinkle
- Re[2]: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Thierry Zoller
- Re: Re[2]: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Dude VanWinkle
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Michael Holstein
- Re: [Full-disclosure] Five Ways to Screw Up SSL
  - From: Dude VanWinkle

Prev by Date: Re: [Full-disclosure] Finding Function in Import Address Tables (IATs)
Next by Date: [Full-disclosure] SCOSA-2006.24 Sendmail Arbitrary Code Execution Vulnerability
Previous by thread: Re: [Full-disclosure] Five Ways to Screw Up SSL
Next by thread: Re: [Full-disclosure] Five Ways to Screw Up SSL
Index(es):
- Date
- Thread