7 ms·
It doesn't have to be internet accessible, AFAIK. If an attacker can get something to do arbitrary DNS lookups, I think it can be attacked. For instance, monito
by jerematasno 12y ago
It doesn't have to be internet accessible, AFAIK. If an attacker can get something to do arbitrary DNS lookups, I think it can be attacked. For instance, monitoring/log correlation software might be vulnerable.
- NickNameNick 12y agoIf you have backend systems parsing XML, then an XXE[1] attack could trigger a DNS lookup, for example. [1]https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing https://www.owasp.org/index.php/XML_External_Entity_%28XXE%2...
- sarciszewski 12y agoOoh, that could lead to some very interesting attack vectors. :D