CVE-2012-1033: Ghost Domain Names: Revoked Yet Still Resolvable

After completing our analysis of the DNS exploit reported by Professor Haixin Duan of Tsinghua University, ISC has determined that the behavior he describes, while verifiable, is due to design issues in the DNS protocol. No immediate steps are planned to address the issue. Further information concerning the implications of the reported vulnerability can be found in the complete problem description

[geekpage]

参考 http://www.cs.indiana.edu/classes/b649-gupt/kangLiNDSS12.pdf

[mickn]

http://www.cs.indiana.edu/classes/b649-gupt/kangLiNDSS12.pdf

[TsuSUZUKI]

cf. https://www.isc.org/files/imce/ghostdomain_camera.pdf , http://internet.watch.impress.co.jp/docs/news/20120210_511317.html