BIND 10 #3114: Too large number crashes BIND 10 and stops it from being restarted

BIND 10 Development do-not-reply at isc.org
Thu Aug 29 21:52:26 UTC 2013


#3114: Too large number crashes BIND 10 and stops it from being restarted
--------------------------------+-----------------------------------------
            Reporter:  cas      |                        Owner:
                Type:  defect   |                       Status:  new
            Priority:  high     |                    Milestone:  New Tasks
           Component:  cmd-ctl  |                   Resolution:
            Keywords:           |                 CVSS Scoring:
           Sensitive:  0        |              Defect Severity:  N/A
         Sub-Project:  Core     |  Feature Depending on Ticket:
Estimated Difficulty:  0        |          Add Hours to Ticket:  0
         Total Hours:  0        |                    Internal?:  0
--------------------------------+-----------------------------------------
Changes (by jreed):

 * sensitive:  1 => 0


Comment:

 I removed the sensitive checkbox.  Here is my comments I sent to Jeff some
 days ago:

 (11:28:44 AM) jreed: As far as I understand it, it is not a security
 issue. No unauthorized user can trigger the crash.

 (11:32:06 AM) jreed: It requires authentication. Only the bind admin can
 cause the problem.

 (11:32:54 AM) jreed: if that is the case, then the bad guy can simply run
 "Init shutdown" :)

 (11:33:34 AM) jreed: Even cmdctl won't listen outside of localhost until
 the admin configures it to listen outside.

-- 
Ticket URL: <http://bind10.isc.org/ticket/3114#comment:3>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list