Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
common dns misconfiguration can lead to "same site" scripting Jan 18 2008 04:40PM
Tavis Ormandy (taviso sdf lonestar org)
Hello, I'd like to document what appears to be a common named
misconfiguration that can result in a minor security issue with web
applications.

It's a common and sensible practice to install records of the form
"localhost. IN A 127.0.0.1" into nameserver configurations, bizarrely
however, administr...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus