Include 0.0.0.0/8 in DNS rebind checks

Follow

mile-lile

December 01, 2015 12:55

Include 0.0.0.0/8 in DNS rebind checks. This range translates to hosts on the local network, or, at  least, 0.0.0.0 accesses the local host, so could be targets for DNS rebinding. See RFC 5735 section 3 for details.

0

• 

  rotblitz December 01, 2015 14:52

  This does not make sense.  This address space cannot be used for destination addressing.  It is just being used for "source hosts on 'this' network".  Therefore it cannot be used for DNS rebinding attacks.  Try it yourself!

  0

  Comment actions Permalink
• 

  jedisct1 December 03, 2015 18:12

  It's a Linux-specific thing. 0.0.0.0 goes to the local interface by default.

  0

  Comment actions Permalink

Please sign in to leave a comment.