Lintlafatso tse lokisoang ho makala a tsitsitseng a seva sa BIND DNS 9.11.18 le 9.16.2, hammoho le lekala la liteko 9.17.1, le ntseng le tsoela pele. Likhatisong tse ncha bothata ba ts'ireletso bo amanang le ts'ireletso e sa sebetseng khahlano le litlhaselo "»ha o sebetsa ka mokhoa oa likopo tsa ho fetisetsa li-server tsa DNS ("bafalli" ba thibela litlhophiso). Ho phaella moo, mosebetsi o entsoe ho fokotsa boholo ba lipalo-palo tsa li-signature tsa digital tse bolokiloeng mohopolong bakeng sa DNSSEC - palo ea linotlolo tse lateloang e fokotsoe ho 4 bakeng sa sebaka ka seng, se lekaneng ho 99% ea linyeoe.
Mokhoa oa "DNS rebinding" o lumella, ha mosebelisi a bula leqephe le itseng ho sebatli, ho theha khokahano ea WebSocket ho ts'ebeletso ea marang-rang marang-rang a ka hare a sa fumaneheng ka kotloloho ka Marang-rang. Ho qoba ts'ireletso e sebelisoang ho libatli khahlano le ho fetela ka nqane ho sebaka sa sebaka sa hajoale (sebaka se fapaneng), fetola lebitso la moamoheli ho DNS. Seva ea DNS ea mohlaseli e lokiselitsoe ho romela liaterese tse peli tsa IP ka bonngoe: kopo ea pele e romela IP ea sebele ea seva le leqephe, 'me likōpo tse latelang li khutlisetsa aterese ea ka hare ea sesebelisoa (mohlala, 192.168.10.1).
Nako ea ho phela (TTL) bakeng sa karabo ea pele e behiloe ho boleng bo fokolang, kahoo ha u bula leqephe, sebatli se etsa qeto ea hore na IP ea sebele ea seva sa mohlaseli ke efe 'me e jara litaba tsa leqephe. Leqephe lena le na le khoutu ea JavaScript e emelang hore TTL e felloe ke nako 'me e romele kopo ea bobeli, eo hona joale e khethollang moamoheli e le 192.168.10.1. Sena se lumella JavaScript ho fihlella lits'ebeletso ka har'a marang-rang a lehae, ho tlola lithibelo tse fapaneng. khahlano le litlhaselo tse joalo ho BIND e ipapisitse le ho thibela li-server tsa kantle ho khutlisa liaterese tsa IP tsa marang-rang a ka hare a hajoale kapa li-aliase tsa CNAME bakeng sa libaka tsa lehae ho sebelisa liaterese tsa ho hana-karabo le litlhophiso tsa ho hana-karabo.
Source: opennet.ru