Critical DNS Breach Poorly Understood

Posted on Wednesday 9 July 2008

Warning: Geek inside

A breach has been found on a fundamental flaw in the DNS protocol which allows an attacker to poison a DNS cache. A Domaine Name Server is essentially an immense, worldwide distributed database. DNS servers across the world help translate Internet domain names, which are letters readable to humans, into the IP addresses, numbers, that networks treat. A DNS cache poisoning is, as the name implies, an event where an attacker inserts a bogus DNS record into a caching name server to redirect users from a legitimate IP address to one controlled by the attacker. Companies usually maintain their own local DNS servers to connect their websites, email servers and other applications to the Internet. DNS server can resolve domain names from the Internet, patch the system and patch DNS clients, like your workstations. Remember, too, lots of products, like routers, switches, and print servers, also are DNS clients.

As far as I know none of the main Icelandic DNS have been patched so far :)

Share this
  • Digg
  • del.icio.us
  • Facebook
  • E-mail this story to a friend!
  • Fark
  • LinkedIn
  • Slashdot
  • StumbleUpon
  • Technorati
  • TwitThis

No comments have been added to this post yet.

Leave a comment




Information for comment users
Line and paragraph breaks are implemented automatically. Your e-mail address is never displayed. Please consider what you're posting.

Use the buttons below to customise your comment.


RSS feed for comments on this post | TrackBack URI