Re: bug #80888: dnrd: Multiple buffer overflows

2003-05-06 Thread Florian Weimer
Drew Scott Daniels [EMAIL PROTECTED] writes: This bug may be worked around (and therefore downgraded) by having a configuration to warn the user that they must trust the DNS servers (wherever this is configured), and must trust the users. Are you sure that you only need to trust the DNS

Re: bug #80888: dnrd: Multiple buffer overflows

2003-05-06 Thread Drew Scott Daniels
On Tue, 6 May 2003, Florian Weimer wrote: Drew Scott Daniels [EMAIL PROTECTED] writes: This bug may be worked around (and therefore downgraded) by having a configuration to warn the user that they must trust the DNS servers (wherever this is configured), and must trust the users. Are

bug #80888: dnrd: Multiple buffer overflows

2003-05-05 Thread Drew Scott Daniels
Sorry for the crosspost, but I wanted to include everyone potentially interested in this bug. The home page for dnrd [1] seems to indicate that it is intended for use for a single computer or an internal network. The typical user will likely only want to allow input to dnrd from trusted sources