Fix for DNS cache spoofing/poisoning attack
Hi
The scanner had flag out a vulnerability in Solaris 11.4.
Below is the description of the vulnerability
How can we fix this?
The remote DNS server responds to queries for third-party domains
that do not have the recursion bit set.
This may allow a remote attacker to determine which domains have
recently been resolved via this name server, and therefore which hosts
have been recently visited.
For instance, if an attacker was interested in whether your company
utilizes the online services of a particular financial institution,
they would be able to use this attack to build a statistical model
regarding company usage of that financial institution. Of course, the