RSSBIND Flaw Could Lead to DNS Problems
By Aaron Dobbins | Published January 29, 2001, 1:33 PM
The Computer Emergency Response Team, otherwise known as CERT, is telling Web administrators and others in key positions that an upgrade to the BIND DNS server software is immediately necessary to prevent attacks and Web outages. According to the CERT report, both versions 4 and 8 of the popular software have been found to be vulnerable to attacks which could allow a potential hacker to reroute Web visitors to different IP addresses.
Reuters reports that as much as 80 percent of all sites on the net could be open to such attacks.
The potential risk was originally discovered by PGP Security, a division of Network Associates. Security experts at the firm also told Reuters that no known uses of the exploit to gain control and reroute traffic have been reported.
More information on the risk can be found at CERT and a new version of the BIND software can be found at the Internet Software Consortium Web site, who makes the BIND software.
this is what brought down..
http://www.okayplayer.com ? ?
Score: 0
|Maybe the whole net will be brought down someday... Then the stupid attacker hackers will have nothing else to do! hahaha
Score: 0
|...did someone check to make sure the pillar that is holding up the sky is still in tact?
Score: 0
|and of course, no flames because it's not MS's DNS server, it's Unix's BIND.
Score: 0
|That was a stupid comment to make. It might have made a lot more sense to post that to slashdot instead of here.
But I read only Slashdot that OpenBSD wasn't vulnerable to the attack, which I found interesting.
Score: 0
|Oh, and just to make you happy...
uN1x s4XoRs
Score: 0
|Nah, Unix is good at what it does, it's just stupid how people bash MS for having a minor problem, and then another company that makes the same exact type of product has a problem, and somehow it's no big deal, because it's not made by MS.
Score: 0
|Well, Microsoft products do cost a pretty penny. BIND is free. Not that it makes it right for people to be hypocritical, but something you pay for should be better than a free product, although this is not always the case.
Score: 0
|Well... comparitively speaking, Win2k is MUCH MUCH MUCH cheaper than getting something like Solaris, and really, the only reason people buy Sun is because of brand loyalty, you wouldn't believe how many times I've been told that Sun products are piles of crap (by programmers, mainly).
Score: 0
|Point taken, but I was mainly referring to the free *nix's (FreeBSD, NetBSD, blahblah BSD, and of course, Linux.)
Score: 0
|