hey I hope you all upgraded your DNS

**mrwilson** · 08-09-2008, 09:19 AM

Thanks for the heads up

**nico-t** · 08-10-2008, 05:59 AM

i dont understand, what is this.. too technical to even bother to read it

**TheDoc** · 08-10-2008, 06:24 AM

Originally posted by nico-t

i dont understand, what is this.. too technical to even bother to read it

You can read the Wired down version of what's going on here.

**fluffygrrl** · 08-10-2008, 11:23 AM

O brother.

This is a rare day indeed.

**fris** · 08-10-2008, 12:08 PM

thanks for the update spanno

**Adult Creative Labs** · 08-10-2008, 02:00 PM

I've been reading about this for a month now. It is truly worrying.

**qxm** · 08-10-2008, 02:08 PM

It would be nice to hear about security measures being taken from major hosting companies about this !!!

Come on WEBAIR, MOJO, PHAT, ISPRIME, PR and all other I forgot to mention !!!....

**jollyperv** · 08-10-2008, 03:49 PM

Originally posted by qxm

It would be nice to hear about security measures being taken from major hosting companies about this !!!

Come on WEBAIR, MOJO, PHAT, ISPRIME, PR and all other I forgot to mention !!!....

Yep, would be nice to hear

**Manowar** · 08-10-2008, 04:13 PM

sounds pretty fucked

**Iron Fist** · 08-10-2008, 04:18 PM

The world fall apart yet? No?? Okay then.... keep moving folks...

**GrouchyAdmin** · 08-10-2008, 05:19 PM

Bind security holes? What's next? a problem with sendmail!?

**Evil E** · 08-10-2008, 07:05 PM

Originally posted by GrouchyAdmin

Bind security holes? What's next? a problem with sendmail!?

LOL that made me laugh, but this doesn't have to do with BIND but with the way DNS was designed as the others name daemons are also vulnerable.

**Evil E** · 08-10-2008, 07:06 PM

Originally posted by qxm

It would be nice to hear about security measures being taken from major hosting companies about this !!!

Come on WEBAIR, MOJO, PHAT, ISPRIME, PR and all other I forgot to mention !!!....

Patches have been out for about a month. If it wasn't patched then your hosting co probably knows less than you about anything.

**SmokeyTheBear** · 08-10-2008, 07:47 PM

Originally posted by sharphead

The world fall apart yet? No?? Okay then.... keep moving folks...

you would wait for the world to fall apart before fixing it ?

**Iron Fist** · 08-10-2008, 07:57 PM

Originally posted by SmokeyTheBear

you would wait for the world to fall apart before fixing it ?

**ne0** · 08-10-2008, 10:14 PM

Hello,
As I see some of our clients sent us questions about this issue, guided by this particular thread.
Just want you to know that we actually have this covered for a while.
This vulnerability is not new and is the reply to many of those interesting '302 errors' webmasters experiences sometimes.
While dnssec is the reply for this problem this isn't something widely spread.
What most sysadmins are doing right now, is raise the range of ports used to reply the queries making the guessing harder.
This happens for a while and exploits for this have been running the internet for about two years or so.

**spooky181** · 08-10-2008, 10:41 PM

Originally posted by SplitNeo

Hello,
As I see some of our clients sent us questions about this issue, guided by this particular thread.
Just want you to know that we actually have this covered for a while.
This vulnerability is not new and is the reply to many of those interesting '302 errors' webmasters experiences sometimes.
While dnssec is the reply for this problem this isn't something widely spread.
What most sysadmins are doing right now, is raise the range of ports used to reply the queries making the guessing harder.
This happens for a while and exploits for this have been running the internet for about two years or so.

Thanks, one of the many reasons I am with you guys....

**rhcp011235** · 08-10-2008, 11:09 PM

ISPRIME doesnt use bind. Thus no security issues

NEXT!

**ne0** · 08-10-2008, 11:22 PM

Just that it's not only bind

Any caching server that is open to recursive queries is vulnerable.
But I'm pretty sure isprime got that covered as well

**DutchTeenCash** · 08-11-2008, 03:20 AM

thanks good read

**born4porn** · 08-11-2008, 03:30 AM

thanks 4 the heads up!!

**WebairGerard** · 08-11-2008, 06:33 AM

We have been aware of this vulnerability as it is not new.
Webair does not use bind and this does not impact any of our clients or services.

**split_joel** · 08-11-2008, 02:08 PM

It doesn't just affect bind.

**Los** · 08-11-2008, 03:26 PM

lol this isnt a bug in bind this is a bug in the design of dns just about every maker has been effected.

**fris** · 08-11-2008, 03:51 PM

dns posining isnt a bind thing, every dns daemon has some vuln to it

hey I hope you all upgraded your DNS

hey I hope you all upgraded your DNS

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment