Forum Discussion
Ilian_Ivanov
Nimbostratus
NimbostratusDNS Server Dynamic Update Record Injection
Hello,
Does anyone know how to mitigate this vulnerability? Looks like F5 GMT v11.6.2 is vulnerable.
https://nmap.org/nsedoc/scripts/dns-update.html
Thank you in advance.
youssef1
Cumulonimbus
CumulonimbusHi,
If you host dns on F5, you can Limit addresses that are allowed to do dynamic updates (eg, with BIND's 'allow-update' option) or implement TSIG or SIG(0).
Following your documentatio: https://www.tenable.com/plugins/nessus/35372
have you already deployed this solution?
Regards,
