|
| ||||||||
Subscribe through Feedburner           ArchivesRecent Comments
|
 |
Well, well, well. It’s certainly been an interesting few weeks in the networking arena. I’ve been watching a discussion about a possible DNS exploit for a bit and it’s grown into a bigger problem. I’m not going to go into the whole story, but here are the highpoints. It seems that a researcher uncovered a new exploit on DNS. This would allow cache poisoning and is a major issue. Now, that exploit concept was accidentally released, then unreleased, to the public. But the proverbial cat is out of the bag when you do it on the internet. So, now there are attempts at damage control as has already been seen in the wild. US-Cert issued a bulletin on their website that is somewhat downplayed in language. But, if you are technical, you will immediately understand that this is a serious, serious issue. If you aren’t technical, let me explain in very broad terms. Websites aren’t really names, like yahoo.com. They are numbers, like 68.180.206.184. DNS servers interpret names into numbers so you don’t have to. But, what if someone were able to fool those DNS server into pointing those names to anothermalicious server. Let’s say that the server contained a website that looked just like your bank, but just harvested logins. You get my point. It’s a very serious issue. Please read through the entire issue. Don’t mess around with this!!! This SANS entry might also be of some use. Related Posts:Microsoft XMLHTTP ActiveX Control Exploit Here's another extremely critical exploit out in the wild for Internet Explorer.... Internet Explorer Extremely Critical Vulnerability vulnerability has been discovered in Internet Explorer which could allow a malicious person to exploit a vulnerability. This... Firefox 2.0.0.5 Password Vulnerability Just a quick note to make you aware of a serious password vulnerability in Firefox 2.0.0.5. Over the weekend,... Pharming This weekend saw a host of attacks aimed at pharming users to false websites. Pharming utilizes various host and/or... Word 2000 Extremely Critical Vulnerability Secunia has issued an extremely critical vulnerability warning for Microsoft Word 2000. The vulnerability is actually a rework of... Comments |
 |
| ||||
