Saturday November 22, 2008 3:58 AM AEST
Latest Comments
"when i login to face book it tells me i am cookies enabled what does this mean"
by celeste | Nov 21, 2008 5:15 PM
 
"Hi this is the mail I received Brett Karpman show details Nov 17 (3 days ago) Reply Atten..."
by Rodney Churchyard | Nov 20, 2008 6:13 PM
 
"security through obscurity...shows how detached HIPAA is from reality."
by priceOfFishInChina | Nov 20, 2008 1:19 PM
 
"Umm. no. The 6.5 product is mounting the offline VM image and performing a scan for patch ..."
by eric | Nov 20, 2008 8:15 AM
 
"it's great i tried it"
by divyacharan | Nov 20, 2008 12:24 AM
Web

First DNS attacks reported

  • Email a Friend
  • Print Page
First DNS attacks reported
By Shaun Nichols
Jul 28, 2008 10:14 AM
Tags: First | DNS | attacks | reported
The attack was reported by a user named James Kosin to a Fedora Linux mailing list.

Kosin posted a log which he said was gathered Thursday night. The attacker attempts to access the server's cache for entries to such sites as myspace, ebay and Wachovia.

The attack attempts to target a vulnerability in the Domain Name System in which an attacker could alter the cache on a DNS server to redirect site requests to malicious third-party sites.

"The spooks are out in full on this security vulnerability in force. Patch or upgrade now!" wrote Kosin.

Industry experts, including Kaminsky himself, have issued similar warnings to administrators. Kaminsky intentionally held off on releasing the details of the flaw until vendors could patch it.

Exploit code for the vulnerability was posted earlier this week as a module for the Metasploit framework.

Though experts estimate that most major ISPs and vendors have patched the flaw, poorly-maintained DNS servers could still be open to the attack.

Copyright © 2008 vnunet.com

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
 
Vulnerabilities & Exploits Whitepapers