DNS Exploit Flaw Arrives

July 25, 2008 | by Christopher Nickson

It was bound to happen — after a DNS flaw was revealed, it was only a matter of time before someone discovered an exploit flaw for it.

Not long ago security research Dan Kaminsky revealed a flaw in the Domain Name System (DNS), although he refused to give details. Those came, somewhat inadvertently, thanks to another researcher, Halvar Flake.

Now, inevitably, the first exploit code for that flaw has arrived.

Luckily, it’s been created by two other researchers, HD Moore and Druid, who’ve developed an exploit module that runs that Moore’s vulnerability-testing framework, Metasploit, according to Vnunet.

Kaminsky had refused to give details of the flaw until a solution had been developed, and that was followed by a massive patch rollout, so many servers are already patched against any potential attack.

Post Your Comment...Comments

Be the first to comment on the article!

Comment on this article




Please keep your comments relevant to this article. Email addresses are not displayed, they are only required to verify you are human.

When you submit your comment, an email will be sent to your email address with a confirmation link. Once you have clicked on that confirmation link your comment will be posted.

HTML is not allowed.




Join our newsletter to keep up to date on the latest Digital Trends content like Videos, Reviews, News and more delivered directly to your email!


Plus, get early access to contests and specials from our partners. Join today!





Loading...