DNS Poisoning Patch: A Case Study in How to Respond
The CERT advisory on the dns poisoning vulnerability that affected multiple implementations of DNS describes a serious vulnerability and what is most noteworthy about this story is the way vendors, security researchers and DNS developers responded.
The advisory notes:
Recent research into these and other related vulnerabilities has produced extremely effective exploitation methods to achieve cache poisoning. Tools and techniques have been developed that can reliably poison a domain of the attacker's choosing on most current implementations. As a result, the consensus of DNS software implementers is to implement source port randomization in their resolvers as a mitigation.
Dan Kaminsky, of IOActive discovered the flaw and coordinated a simultaneous multi-vendor response which included Microsoft, Cisco and Sun. This level of coordination has never been done before, according to Network World, but this example proves it can be done successfully.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
