First Instance of New DNS Exploit Reported

AT&T DNS Servers may have been compromised

July 31, 2008 - Reports are coming in that an AT&T DNS server may have been compromised with malicious code that exploits a vulnerability reported earlier this month.

The attackers replaced a cache entry for www.google.com with a web page that loaded advertisments hidden inside an iframe. While this attack was not malicious it did reinforce the importance of installing patches throughout the DNS infrastructure. These patches are designed to provide more randonness in the system.

This newly identified vulnerability is within the DNS protocol itself, making all DNS servers vulnerable. Redirected web sites requests could make it difficult to trust web-based data and transactions.

Source: GCN.com

About Secure64 Software Corporation
Secure64® is a software developer providing highly secure DNS and server applications with built-in denial-of-service protection features to help ensure your Internet-dependent business is always accessible. Based on the genuinely secure SourceT® microOS, Secure64 DNS remains highly available during network attacks and is immune to compromise from rootkits and malware.

DNS Security News Index