Skip to content
OpenAdvisories

Weakness (CWE)

CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action

Variant Draft

The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate.

  2. Implementation

    Perform proper forward and reverse DNS lookups to detect DNS spoofing.

Source: MITRE CWE-350

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.