Multiple DNS implementations vulnerable to cache poisoning
Vulnerability Note VU#800113
From: https://www.kb.cert.org/CERT_WEB%5Cservices%5Cvul-notes.nsf/id/800113
Quote:
An attacker with the ability to conduct a successful cache poisoning attack can cause a nameserver’s clients to contact the incorrect, and possibly malicious, hosts for particular services. Consequently, web traffic, email, and other important network data can be redirected to systems under the attacker’s control.
At least 30 vendors appear to be known vulnerable. This is a significant number. Start contacting your vendors!
Leave a Comment...
You must be logged in to post a comment.
Ruan is a resolute technophile that is currently devoted to the professional practice of Information Technology Management. In his free time Ruan pursues various interests including the study of Information Security practices and the exploration of visual culture through contemporary photography and communication design.
- pfSense 2 log visualization with glTail on OSX Lion
5:58 pm, December 5, 2011 - NIST Releases Secure Cloud Computing Guidelines
11:54 am, September 15, 2011 - MIT researchers craft defense against wireless man-in-middle attacks
9:16 am, August 26, 2011 - EU Upset by Warning About US Access to EU Cloud
1:34 pm, July 6, 2011 - RSA comes clean: SecurID is compromised
7:34 pm, June 7, 2011