Leading vendors team up to squash DNS bug
We're all in this together.
By Robert McMillan, IDG News Service | Published: 07:59, 09 July 2008
Leading vendors have teamed up to release a patch to fix a serious bug that has affected the DNS protocol that underlies the entire Internet. Microsoft, Cisco, Red Hat, Sun Microsystems and the Internet Software Consortium, makers of the most widely used DNS server software, have all updated their software to address the vulnerability
The bug was discovered some months ago by Dan Kaminsky, a researcher with security vendor IOActive, and since then he and the leading vendors have been working to address the problem.
By sending certain types of queries to DNS servers, the attacker could then redirect victims away from a legitimate website to a malicious website without the victim realising it. This type of attack, known as DNS cache poisoning, doesn't affect only the Web. It could be used to redirect all Internet traffic to the hacker's servers.
The bug could be exploited "like a phishing attack without sending you e-mail," said Wolfgang Kandek, chief technical officer with security company Qualys.
Although this flaw does affect some home routers and client DNS software, it is mostly an issue for corporate users and ISPs that run the DNS servers used by PCs to find their way around the Internet, Kaminsky said. "Home users should not panic," he said.
Comments
Lic Elena Solis said: But in a way we panicComputers are made not only for businesses developmentwe use them for leisuretooAnd all the world offers now new great servers and technicsbut now its the time we need from you all the Techworlds the universal Security attached into all the computer systems to avoid all these illmentall hacking here in JapanIts a matter of urgency about all this Kind Crime many enemies of Europe and the US hide into our computer systemsPoor people earn now power hacking computersspying politiciansforeign govts and foreigners living in Japanmaybe not only through Internet but with cameras into our kitchens or soand we cannot realise itWe need as a matter of urgency your help getting catchers able to give the names of all the hackers which touch our serversMr Kaminsky and all the brains our friends need to act to ensure our safetyThank You Very Muchin advanceElena Solis