US-CERT Says They Are Aware of DNS Exploit Code, Emphasizes Urgent Patching

Home / News

US-CERT Says They Are Aware of DNS Exploit Code, Emphasizes Urgent Patching

By CircleID Reporter
July 24, 2008, 9:29 pm PDT Views: 7,471 Add Comment

The United States Computer Emergency Readiness Team (US-CERT) has acknowledged that they are aware of the publicly available exploit code for a cache poisoning vulnerability in common DNS implementations. US-CERT is re-emphasizing the urgency of patching vulnerable DNS systems:

“Exploitation of this vulnerability may allow an attacker to cause a nameserver’s clients to contact the incorrect, and possibly malicious hosts for particular services. As a result, web traffic, email and other important network data could be redirected to systems under the attacker’s control. US-CERT strongly urges administrators to patch affected systems immediately.”

An exploit code for the flaw allowing insertion of malicious DNS records into the cache of target nameservers was made public by a source called Metasploit very recently.

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under

Comments

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

VINTON CERF
Co-designer of the TCP/IP Protocols & the Architecture of the Internet