Re: djbdns<=1.05 lets AXFRed subdomains overwrite domains
Scott Gifford <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
"D. J. Bernstein" <[email protected]> writes: [...] > Even though this bug affects very few users, it is a violation of the > expected security policy in a reasonable situation, so it is a security > hole in djbdns. Third-party DNS service is discouraged in the djbdns > documentation but is nevertheless supported. Dempsky is hereby awarded > $1000. Wow! Congratulations Matt on finding a bug and handling it effectively and responsibly, and congratulations Dan on following up so quickly and coming through on your security guarantee. Makes me glad I use djbdns. ----Scott.