Mailinglist Archive


Rebinding attacks unbound
From:Joe Klemmer
Date: Fri, 09 Nov 2007 20:48:25 -0500

Rebinding attacks unbound

By Federico Biancuzzi
DNS rebinding was discovered in 1996 and affected the Java Virtual
Machine (VM). Recently a group of researchers at Stanford found out that
this vulnerability is still present in browsers and that the common
solution, known as DNS pinning, is not effective anymore.

http://www.securityfocus.com/columnists/455