DNS Disaster -- Redmondmag.com

Barney's Blog

DNS Disaster

The Domain Name System (DNS) lies at the core of the Internet and our own corporate networks, but most admins and network pros barely give it a second thought. An exploit discovered last summer that's now starting to spread should make us all take DNS seriously.

The problem comes with the scary name cache-poisoning vulnerability. "The vulnerability involves a weakness in the transaction ID used in DNS queries. Currently, replies to a DNS query have to contain the proper transaction ID, which is chosen randomly from 65,000 values," our report explains. Fortunately, there's a patch -- and has been for about half-a-year.

Posted by Doug Barney on 02/23/2009 at 1:16 PM

Featured

Choosing the Right SSID for Your Network

Attracting attention, whether through a default or funny Wi-Fi name, could lead to a security issue.
Microsoft Outlines Latest Security Efforts at Ignite

In the wake of last year's CrowdStrike incident, Microsoft has worked to publicly rehabilitate its security image through new initiatives and public commitments to improve. That push continued this week at Ignite, where Microsoft announced a handful of new security tools and updates.
Nadella on Copilot: 'Major Platform Shifts Are in the Air'

As should be no surprise, Copilot took center stage during Microsoft CEO Satya Nadella's keynote speech to open Microsoft Ignite 2024.
Azure AI Foundry Revealed at Microsoft Ignite

Microsoft is consolidating its Azure generative AI tools into a unified platform named Azure AI Foundry.
Microsoft Bolsters Fabric at Ignite

While Fabric has improved in the year since its release, there are still some glaring issues with the platform.