Printable View
Sure didn't take long :)
Attack code available here: http://www.caughq.org/exploits/CAU-EX-2008-0002.txtQuote:
http://blogs.zdnet.com/security/?p=1545&tag=nl.e539
Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool.
Well, it was just a matter of time he he although the question could be if that attack code could be available as it's now if the details of the DNS flaw weren't leaked
OpenDNS--try it
it is free and much faster than your ISP's DNS servers :cool:
http://www.opendns.com/
(it does NOT suffer from this new DNS poisoning vulnerability)...for now
edit: there is no available linux client updater unfortunately
I changed to OpenDNS a while ago after finding out that RoadRunner (TWC) still hasn't patched... I just checked, and they're still vulnerable (TWC, that is)...
Actually, there is, you can use inadyn, check here:Quote:
Originally Posted by C:\Saw
http://forums.opendns.com/comments.php?DiscussionID=157
and here:
http://fwennberg.blogspot.com/2007/0...ned-linux.html
There an easy way to tell if my ISP (comcast) is vuln or not?
Or should I just install openDNS to be on the safe side (used to have it, worked great)
Check http://www.doxpara.com/Quote:
There an easy way to tell if my ISP (comcast) is vuln or not?
Otherwise try this:
https://www.dns-oarc.net/oarc/services/dnsentropy
From what I can gather Comcast is supposed to be OK now.
I have also heard that these tests can produce false negatives due to interactions between the test and other security measures in place on the servers?
:)
At least he has a sense of humor. His company, BreakPoint, uses AT&T which got owned presumably via his metasploit program.Quote:
"It's funny," he said.(HD Moore of metasploit fame) "I got owned."
http://www.networkworld.com/news/200...-a-victim.html
It's a far more serious problem than he is letting on here:
http://www.thetechherald.com/article...-was-NOT-Pwned
I have several customers that are having serious mail problems because ATT is, I believe, being attacked. A tech at ATT said he can have me change my customers DNS info but that'll only last so long as the extra load on those servers will cause a DOS also. So...
Hmmm.
Gotta love service providers.