About the famous DNS vulnerability.

[imported_demente]

Hi guys,
is there a tool or script that checks if a determined server is vulnerable??

Vulnerability Description
hxxp://xxx.kb.cert.org/vuls/id/800113

i know that are some webpages that claims to do the check, like
xxx.dnsstuff.com/, xxx.doxpara.com/ and hxxp://entropy.dns-oarc.net/test/

But the servers that i need to check (and patch if necesary) have no access to internet (blocked by ACL) and only respond to ssh (for admin) and udp 53 (dns). So i cannot check on this servers using a web page.

So, am searching for a tool that i can execute in the same vlan where the servers are (lan acces to the servers) for have a trustworthie result.
the plataform could be linux or win, there is no problem with that.

Something like sh dnscheck -i eth1 10.10.10.1-50 -o Report.txt

Thanks!!!

[imported_wyze]

Hi guys,
is there a tool or script that checks if a determined server is vulnerable??

Vulnerability Description
hxxp://xxx.kb.cert.org/vuls/id/800113

i know that are some webpages that claims to do the check, like
xxx.dnsstuff.com/, xxx.doxpara.com/ and hxxp://entropy.dns-oarc.net/test/

But the servers that i need to check (and patch if necesary) have no access to internet (blocked by ACL) and only respond to ssh (for admin) and udp 53 (dns). So i cannot check on this servers using a web page.

So, am searching for a tool that i can execute in the same vlan where the servers are (lan acces to the servers) for have a trustworthie result.
the plataform could be linux or win, there is no problem with that.

Something like sh dnscheck -i eth1 10.10.10.1-50 -o Report.txt

Thanks!!!

Yes: Metasploit does this with Baliwicked tool, which can be found in auxiliary with an update 3.2 Metasploit

More info here: http://blog.metasploit.com/2008/07/bailiwicked.html

[imported_demente]

Excelent!! Thank you wyze!!! am reading the blog right now!!!!
Tomorrow at first light i will be checking those servers!!!

[caturix]

You can also check it deom Dan Kaminsky's site. That is if the server you want to check is accepting requests from the outside and you just want a quick and easy answer.

url not posted because of my limited message history.

[imported_demente]

Thanks caturix, but as i said before the servers have no access to internet (blocked by ACL), so i cannot use any webpage to check them, but thanks anyway men!

[caturix]

heh. I must have been drunk when I responded. I don't remember reading (or in this case) misreading your post.