Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> General >> Usable remote name server


Vulnerability Assessment Details

Usable remote name server

Vulnerability Assessment Summary
Acertains if the remote name server allows recursive queries

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote name server permits recursive queries to be performed
by the host running nessusd.


Description :

It is possible to query the remote name server for third party names.

If this is your internal nameserver, then forget this warning.

If you are probing a remote nameserver, then it permits anyone
to use it to resolve third parties names (such as www.nessus.org).
This permits hackers to do cache poisoning attacks against this
nameserver.

If the host permits these recursive queries via UDP,
then the host can be used to 'bounce' Denial of Service attacks
against another network or system.

See also :

http://www.cert.org/advisories/CA-1997-22.html

Solution :

Restrict recursive queries to the hosts that should
use this nameserver (such as those of the LAN connected to it).

If you are using bind 8, you can do this by using the instruction
'permit-recursion' in the 'options' section of your named.conf

If you are using bind 9, you can define a grouping of internal addresses
using the 'acl' command

Then, within the options block, you can explicitly state:
'permit-recursion { hosts_defined_in_acl }'

For more info on Bind 9 administration (to include recursion), see:
http://www.nominum.com/content/documents/bind9arm.pdf

If you are using another name server, consult its documentation.

Network Security Threat Level:

Medium / CVSS Base Score : 4
(AV:R/AC:L/Au:NR/C:N/A:N/I:P/B:I)

Networks Security ID: 136, 678

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security

Cables, Connectors

Intel Core i5-2410M 2.3GHz Mobile Socket G2 Laptop CPU Processor SR04B
$16.99
Intel Core i5-2410M 2.3GHz Mobile Socket G2 Laptop CPU Processor SR04B pictureLot of 4 Intel Core Processors SR04J i3-2330M(2) SR0DP i3-2370M(2) Laptop CPU
$29.99
Lot of 4 Intel Core Processors SR04J i3-2330M(2) SR0DP i3-2370M(2) Laptop CPU pictureLot of 10 Intel Core i5 i5-520M(3), i5-540M(3), i5-560M(4) Laptop CPU Processors
$49.99
Lot of 10 Intel Core i5 i5-520M(3), i5-540M(3), i5-560M(4) Laptop CPU Processors pictureAMD A6-3420M AM3420DDX43GX Quad Core 1.5 GHz Socket FS1 Laptop CPU Processor
$7.99
AMD A6-3420M AM3420DDX43GX Quad Core 1.5 GHz Socket FS1 Laptop CPU Processor picture


Discussions

No Discussions have been posted on this vulnerability.