[79454] in North American Network Operators' Group
DNS cache poisoning update
daemon@ATHENA.MIT.EDU (Fergie (Paul Ferguson))
Thu Apr 7 16:45:04 2005
From: "Fergie (Paul Ferguson)" <fergdawg@netzero.net>
Date: Thu, 7 Apr 2005 20:43:33 GMT
To: nanog@merit.edu
Errors-To: owner-nanog@merit.edu
SANS Internet Storm Center:
"The InfoCon is currently set at yellow in response to
the DNS cache poisoning issues that we have been reporting
on for the last several days. We originally went to yellow
because we were uncertain of the mechanisms that allowed
seemingly "secure" systems to be vulnerable to this issue.
Now that we have a better handle on the mechanisms, WE
WANT TO GET THE ATTENTION OF ISPs AND ANY OTHERS WHO RUN
DNS SERVERS THAT MAY ACT AS FORWARDS FOR DOWNSTREAM
Microsoft DNS SYSTEMS. If you are running BIND, please
consider updating to Version 9. Read on for more
information..."
http://isc.sans.org/diary.php
- ferg
--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawg@netzero.net or fergdawg@sbcglobal.net