Noted reverse engineer outs DNS flaw details.
Jul 28, 2008
SearchSecurity.com - Jul 22, 2008
Halvar Flake, a noted reverse engineer who criticized Dan Kaminsky’s DNS Server flaw as overblown, has caused a stir among security researchers for possibly exposing the details in a blog post.
Flake hypothesized on his blog about how an attacker could conduct DNS cache poisoning by overloading the server with requests until a legitimate answer is received. The goal is to get a DNS cache poisoning packet to match the transaction ID, according to Flake’s post. The technique also involves redirecting the name server to an IP address set up by the attacker and the use of Bailiwick checking to dupe the server that the queried domain is legit.
Inquirer - Jul 22, 2008
By Egan Orion: Tuesday, 22 July 2008, 12:05 PM TECHNICAL DETAILS about a flaw in the Internet's Domain Name System (DNS) that still exists on some networks
eWeek - Jul 22, 2008
By Brian Prince Technical details of a flaw in the Domain Name System that made headlines earlier this month were accidentally posted to a well-read
CNET News - Jul 22, 2008
Thirteen days after Dan Kaminsky asked his fellow researchers not to speculate on the details of his DNS flaw, a fellow Black Hat researcher published his
Computerworld - Jul 22, 2008
By Robert McMillan July 21, 2008 (IDG News - A computer security company on Monday inadvertently published details of a major flaw in the Internet's Domain Name System (DNS) several weeks before they were due to be disclosed.
The flaw was discovered several months ago by IOActive researcher Dan Kaminsky, who worked through the early part of this year with Internet software vendors such as Microsoft, Cisco and the Internet Systems Consortium to patch the issue.
ug, saying that by using a fast Internet connection, an attacker could launch what's known as a DNS cache poisoning attack against a Domain Name server and succeed, for example, in redirecting traffic to malicious Web sites within about 10 seconds.
@2008 NEWZOF.com | View in Mobile Version