Mailinglist Archive


Rebinding attacks unbound
From:Joe Klemmer
Date: Thu, 25 Oct 2007 16:39:04 -0400

Rebinding attacks unbound
By Federico Biancuzzi

DNS rebinding was discovered in 1996 and affected the Java Virtual
Machine (VM). Recently a group of researchers at Stanford found out that
this vulnerability is still present in browsers and that the common
solution, known as DNS pinning, is not effective anymore.

http://www.securityfocus.com/columnists/455