DNS Forgery Pharming: Severe Flaw Found In Bind 9 DNS Software

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

DNS Forgery Pharming: Severe Flaw Found In Bind 9 DNS Software

07-25-2007, 09:58 AM,

Post: #1

mandy Offline

Administrator

Posts: 9,932
Likes Given: 0
Likes Received: 6 in 5 posts
Joined: Feb 2011
Reputation: 0

DNS Forgery Pharming: Severe Flaw Found In Bind 9 DNS Software

Quote:Trusteer announced today that its CTO and security researcher Amit Klein has cracked BIND's random number generator and demonstrated a new attack affecting most Internet users. In this "DNS Forgery Pharming" attack fraudsters can remotely force consumers to visit fraudulent websites without compromising any computer or network device...

However, security researcher and Trusteer's CTO, Amit Klein, has discovered a severe flaw in BIND's implementation which allows fraudsters to efficiently predict generated random numbers without the need to control the route between the user and the DNS server. Using this vulnerability fraudsters can remotely forge DNS responses and direct users to fraudulent websites. The fraudulent website can steal the user's sign-in credentials or tamper with the user's communication with the website...

full article: http://www.net-security.org/secworld.php?id=5366

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Preventing DNS Poisoning	Kristijntje	0	2,948	07-12-2008, 12:00 PM Last Post: Kristijntje
	The State of DNS on the Net	Kristijntje	0	3,185	11-22-2007, 12:38 PM Last Post: Kristijntje
	Know How DNS Works	TulipNewsBot	3	4,104	09-16-2007, 08:24 PM Last Post: bargainbloodhound
	How Social Networking Sites Are Hurting Your Network and DNS Servers	mandy	0	2,915	06-25-2007, 10:02 AM Last Post: mandy
	Creating Cheap Fault-tolerant Web hosting via DNS and BIND	mandy	0	3,145	05-10-2007, 09:42 AM Last Post: mandy
	Bind DNS server Setup in Ubuntu Linux	mandy	0	3,136	05-07-2007, 09:38 AM Last Post: mandy
	Five Mistakes Not to Make in DNS	mandy	0	2,999	04-28-2007, 10:20 AM Last Post: mandy
	Department of Homeland Security requests master key for DNS root zone	mandy	0	2,800	04-01-2007, 08:29 AM Last Post: mandy
	Resolving Domains Internally and Externally with Bind	mandy	0	2,843	02-12-2007, 10:29 AM Last Post: mandy
	How to setup a DNS Zone with Bind	mandy	0	3,063	08-20-2006, 09:31 AM Last Post: mandy

Forum Jump:

Users browsing this thread: 3 Guest(s)