bargainshare.com > DNS Server Flaw Could Redirect Users to Alternate Addresses

Full Version: DNS Server Flaw Could Redirect Users to Alternate Addresses

bargainshare.com > Community > Computer & Tech Help

cron

7-24-08, 4:59pm

Tests to Check if Your ISP's DNS Server is Patched:
Test 1 (top right, "check my dns" button)
Test 2
______________________________________________

QUOTE

CNET Article: What you need to know about the latest DNS flaw

Article Excerpt:

The flaw is mostly with software on a server computer run by your Internet Service Provider (ISP).* Some ISPs have patched the vulnerable DNS software on their computers, some have not. A recent list is available here. That said, Windows users also need to be sure they are up to date on patches as Microsoft released a recent DNS patch for Windows XP, 2000 and Server 2003. Windows Vista does not need to be patched.

BlueTDimly

7-25-08, 2:03am

Thanks for posting the tests. This is a scary vulnerability.

cron

7-25-08, 11:24am

QUOTE (BlueTDimly @ 7-25-08, 5:03am)

This is a scary vulnerability

It seems like a lot of major ISPs are still catching up. A few news sites have posted that at least two exploits have been released so far.

I changed my DNS on my router to use http://www.opendns.com/ temporarily. (I was getting mixed results on the tests.)

Miranda

7-25-08, 1:06pm

Your name server, at ##.#.##.##, appears to be safe, but make sure the ports listed below aren't following an obvious pattern.

##.#.##.## appears to have GREAT source port randomness and GREAT transaction ID randomness.

cron

8-6-08, 8:14pm

QUOTE

CNN: Hackers create fake sites through flaw

In one case, the vulnerability allowed hackers to reroute some computer users in Texas to a fake Google.com site loaded with automated advertisement-clicking programs, a scam to generate profits for the hackers from those clicks.

looks like it's starting to get exploited more now. My ISP seems to have patched finally.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.