Re: bug #80888: dnrd: Multiple buffer overflows

2003-05-06 Thread Drew Scott Daniels
On Tue, 6 May 2003, Florian Weimer wrote: > Drew Scott Daniels <[EMAIL PROTECTED]> writes: > > > This bug may be worked around (and therefore downgraded) by having a > > configuration to warn the user that they must trust the DNS servers > > (wherever this is configured), and must trust the users.

Re: bug #80888: dnrd: Multiple buffer overflows

2003-05-06 Thread Florian Weimer
Drew Scott Daniels <[EMAIL PROTECTED]> writes: > This bug may be worked around (and therefore downgraded) by having a > configuration to warn the user that they must trust the DNS servers > (wherever this is configured), and must trust the users. Are you sure that you only need to trust the DNS s

bug #80888: dnrd: Multiple buffer overflows

2003-05-05 Thread Drew Scott Daniels
Sorry for the crosspost, but I wanted to include everyone potentially interested in this bug. The home page for dnrd [1] seems to indicate that it is intended for use for a single computer or an internal network. The typical user will likely only want to allow input to dnrd from trusted sources [2