[46191] in North American Network Operators' Group
[mattc@guarded.net: Major DNS cache poisoning at Verisign/WorldNIC]
daemon@ATHENA.MIT.EDU (Alan Clegg)
Tue Mar 19 21:54:04 2002
Date: Tue, 19 Mar 2002 21:53:26 -0500
From: Alan Clegg <alan@clegg.com>
To: nanog@merit.edu
Message-ID: <20020319215326.A34811@shell.wetworks.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw"
Content-Disposition: inline
Errors-To: owner-nanog-outgoing@merit.edu
--wac7ysb48OaltWcw
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
----- Forwarded message from "Matthew F. Caldwell" <mattc@guarded.net> -----
Date: Tue, 19 Mar 2002 14:18:56 -0500
From: "Matthew F. Caldwell" <mattc@guarded.net>
Subject: Major DNS cache poisoning at Verisign/WorldNIC
To: <incidents@securityfocus.com>
Just to let everyone know, there has been some major DNS cache poisoning go=
ing on at Verisign apparently done by some Brazilians ("Web Pirates") for w=
eb site defacements. If your parking your DNS at worldnic.com (netsol/veris=
ign) you might want to see if you site has been redirected to 64.225.154.17=
5 (owned by Interland of Atlanta) using random DNS servers.=20
Don't you love UDP.
Matthew F. Caldwell, CISSP=20
Chief Security Officer=20
GuardedNet, Inc=20
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management=20
and tracking system please see: http://aris.securityfocus.com
----- End forwarded message -----
--wac7ysb48OaltWcw
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org
iD8DBQE8l/mmyJP8xSfQVdsRAkXXAKDk1jf8r2WvjnXdduDnAyjonEGuZQCfZtOl
Fq/PA1D/bLz/kXv1TUTmyHs=
=9Mxh
-----END PGP SIGNATURE-----
--wac7ysb48OaltWcw--
