Lucene search
+L

1 matches found

seebug.org
seebug.org
added 2017/04/13 12:0 a.m.18 views

Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID

I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from spoofing responses. For example, see MS08-020 when this happened...

6.9AI score
SaveExploits0
Rows per page
Query Builder