BIND 10 #3114: Too large number crashes BIND 10 and stops it from being restarted
BIND 10 Development
do-not-reply at isc.org
Fri Aug 30 10:31:41 UTC 2013
#3114: Too large number crashes BIND 10 and stops it from being restarted
--------------------------------+-----------------------------------------
Reporter: cas | Owner:
Type: defect | Status: new
Priority: high | Milestone: New Tasks
Component: cmd-ctl | Resolution:
Keywords: | CVSS Scoring:
Sensitive: 0 | Defect Severity: N/A
Sub-Project: Core | Feature Depending on Ticket:
Estimated Difficulty: 0 | Add Hours to Ticket: 0
Total Hours: 0 | Internal?: 0
--------------------------------+-----------------------------------------
Comment (by vorner):
I'm not saying this should not be fixed, or something. This, surely, is a
bug and it should be fixed. I was just saying we should not be keeping it
secret, because an attacker doesn't gain anything knowing that there's
such a bug. On the other hand, a user stumbling on this by accident can
find some background and help here.
The comparison with „Init shutdown“ was meant as illustrating which level
of permissions you need. If an attacker can abuse this bug, he can also
use „Init shutdown“ (both willingly).
--
Ticket URL: <http://bind10.isc.org/ticket/3114#comment:5>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list