Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
Feb 06 2008 04:04PM
Amit Klein (amit klein trusteer com)
Recently I've been looking at the OpenBSD PRNG implementation for
DNS transaction ID (OpenBSD ported BIND 9 into their code tree,
but rolled their own PRNG for the DNS transaction ID field). I
discovered a serious weakness in OpenBSD's PRNG, which allows an
attacker to predict the nex...
[ more ]
Copyright 2010, SecurityFocus