Clan x86

Technical (Development, Security, etc.) => General Security Information => Topic started by: Blaze on July 27, 2008, 12:58:15 AM

Title: DNS Protocol Flaw
Post by: Blaze on July 27, 2008, 12:58:15 AM
http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/

More info at: http://www.doxpara.com/

Neat.  :)
Title: Re: DNS Protocol Flaw
Post by: iago on July 27, 2008, 10:52:47 AM
It's pretty cool, but in my opinion Kaminsky handled it really badly. He was more interested in hyping it up for Blackhat than for actually helping people.

H D Moore has already added an exploit for it to Metasploit:
http://www.caughq.org/exploits/CAU-EX-2008-0002.html

Fun stuff! :)