Smaller ISPs at Risk to DNS Flaw

Advised to patch to avoid customer fraud risks

August 4, 2008 - Researchers say smaller ISPs slow response to patch the critical DNS flaw leaves their customers at risk of fraud. Despite repeated requests, sources reveal many DNS admins have yet to fix the flaw, despite being notified by security researchers, and nagged by concerned ISPs and Web masters.

A hacker can easily trick online banking customers by making a fake bank Web site, find a vulnerable resolver, and poison its cache so that customers using that resolver are directed to the fake address instead of the bank Web site.

Source: Washington Post online

About Secure64 Software Corporation
Secure64® is a software developer providing highly secure DNS and server applications with built-in denial-of-service protection features to help ensure your Internet-dependent business is always accessible. Based on the genuinely secure SourceT® microOS, Secure64 DNS remains highly available during network attacks and is immune to compromise from rootkits and malware.

DNS Security News Index