Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

External service interaction (DNS)

Iftikher | Last updated: Aug 04, 2016 12:52PM UTC

Hi ! I have scanned a target address and found "External service interaction (DNS)" vulnerability. Is this related to DNS Zone Transfer? and How do i rate this vulnerability according to 1 to 10? please help me ASAP Thank You..

Liam, PortSwigger Agent | Last updated: Aug 04, 2016 12:59PM UTC

Hi Iftikher Thanks for your message. "External service interaction (DNS)" is listed as a high severity issue. This would place it in the 7-10 range of your scale. That being said, the given severity is a rough indication of the impact of the issue, in a typical application. It indicates, roughly, how bad it would be for the application/owner if the issue was exploited. Any classification of issue severity is inherently vague, ordinal in nature (rather than quantitative), and should be reviewed by the user based on their knowledge of the purpose and context of the associated functionality.

Burp User | Last updated: Aug 04, 2016 01:13PM UTC