Email us! Subscribe to Liquidmatrix!

DNS Sploit Weaponization

Yeah, a little dramatic

So, unless you’ve been hiding under a rock for the last little while you’ll know that Dan Kaminsky broke DNS in a rather big way.

And you’d know that the gory details hit the tubes of the internet a couple days ago.

Hell, there was even a poem about the whole mess. (bless you Hoff)

Now, the DNS ’sploit has been weaponized. HD Moore and company over at Metasploit have released it. For a full write up on it check out our friend, Nate McFeter’s, blog posting on the DNS exploit. Yes, it is being actively exploited.

This storm has of course reignited the inevitable (and tiresome) disclosure debate. Let me save you the trouble and cut right to the chase…

PATCH YOUR FSCKING DNS SERVERS.

Consider yourselves warned…again.

OK, I’m tired talking about this subject. What else is going on in the world?

Tags: , , , , ,

Tag It:
  • Digg
  • del.icio.us
  • Slashdot
  • Technorati
  • SphereIt
  • StumbleUpon
  • Fark
  • YahooMyWeb
  • Furl
  • Spurl
  • Ma.gnolia
  • NewsVine
Related Articles:

  • Hoff: DNS Debacle In Poetic Review
  • Liquidmatrix DNS Issues
  • Windows DNS Cache Poisoning (MS07-062)
  • BIND 9.4.1 Released
  • DNS Pinning Explained
  • Nate McFeters said,

    July 24, 2008 @ 10:07 pm

    Thanks for the coverage gents! Further, thanks for the link about HD’s tweets. If you don’t mind, might link back to you with my blog with a quick update on HD’s comments.

    Dave Lewis said,

    July 25, 2008 @ 7:20 am

    @Nate

    Not a problem mate. Feel free.

    Have a great weekend.

    Security4all said,

    July 29, 2008 @ 2:50 am

    So there is indication of real exploitation after all.

    andar909 said,

    August 10, 2008 @ 7:46 pm

    hi, andar here, i just read your post. i like very much. agree to you, sir.

    RSS feed for comments on this post

    Leave a Comment