Home / Vulnerability Database / C-sharp : DNS usage
C#

C-sharp : DNS usage

Classification

Overview

The application uses requests to DNS. DNS replies can not be considered trusted because of possible DNS spoofing attacks.

DNS-servers are vulnerable to attacks. It is necessary to proceed from the assumption that the application is running in an environment with an untrusted DNS server. If an attacker can update the entries in the DNS cache (cache poisoning), he/she can also redirect traffic through his/her own devices.

IP addresses are more secure than DNS names, but they can be overridden in an attack, too.

MEDIUM

DerScanner Severity Score

Do you want to fix C-sharp : DNS usage in your application?

See also

C#

C-sharp : JWT: None Algorithm

C#

C-sharp : Insecure data transmission: Database

C#

C-sharp : Only one of method Equals() and GetHashCode() defined