[10829] in North American Network Operators' Group
Re: Alternic takes over Internic traffic
daemon@ATHENA.MIT.EDU (Paul A Vixie)
Tue Jul 15 15:49:09 1997
To: nanog@merit.edu
In-reply-to: Your message of "Tue, 15 Jul 1997 16:39:45 +0200."
<2.2.32.19970715143945.0068e568@rex.ibm.net.il>
Date: Tue, 15 Jul 1997 12:15:34 -0700
From: Paul A Vixie <vixie@vix.com>
> http://www.news.com/News/Item/0,4,12382,00.html
fyi:
Date: Tue, 15 Jul 1997 11:54:02 -0700
From: paul@vix.com
X-Mailer: Mozilla 3.0Gold (X11; I; OSF1 V4.0 alpha)
MIME-Version: 1.0
To: courtm@cnet.com
CC: paul@vix.com
Subject: http://www.news.com/News/Item/0,4,12382,00.html
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
AlterNIC didn't invent the hack that corrupted the www.internic.net
name. I published a paper on this three years ago, which you can read
in PostScript(tm) form at
ftp://ftp.vix.com/pri/vixie/bindsec.psf
Note that the bug AlterNIC exploited is the same one covered by several
recent Internet mailing list security bulletins. Noone associated with
AlterNIC is smart enough to have figured out any of this by themselves.
Recent versions of BIND (4.9.6 and 8.1.1) which are available via...
http://www.isc.org/isc/
...fix the programming error which allowed this corruption to occur.
