DNS exploit in the wild

Duane <duane@e164.org> Thu, 24 July 2008 00:00 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60CC03A6A96; Wed, 23 Jul 2008 17:00:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.081
X-Spam-Level:
X-Spam-Status: No, score=-1.081 tagged_above=-999 required=5 tests=[AWL=-0.586, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VqiCrWyH3937; Wed, 23 Jul 2008 17:00:17 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 55CCD3A6A95; Wed, 23 Jul 2008 17:00:17 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KLoBn-000Dvy-Cq for namedroppers-data@psg.com; Wed, 23 Jul 2008 23:56:11 +0000
Received: from [208.82.100.153] (helo=mail.aus-biz.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <duane@e164.org>) id 1KLoBi-000Dqb-UO for namedroppers@ops.ietf.org; Wed, 23 Jul 2008 23:56:09 +0000
Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id 4192D5AC5C4 for <namedroppers@ops.ietf.org>; Thu, 24 Jul 2008 09:31:25 +1000 (EST)
Message-ID: <4887BF35.3030302@e164.org>
Date: Thu, 24 Jul 2008 09:31:01 +1000
From: Duane <duane@e164.org>
User-Agent: Thunderbird 2.0.0.14 (X11/20080505)
MIME-Version: 1.0
To: namedroppers@ops.ietf.org
Subject: DNS exploit in the wild
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

http://www.caughq.org/exploits/CAU-EX-2008-0002.txt

-- 

Best regards,
 Duane

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>