North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Exploit for DNS Cache Poisoning - RELEASED

  • From: Florian Weimer
  • Date: Sat Jul 26 15:42:16 2008 
* Paul Vixie:

> in <http://permalink.gmane.org/gmane.linux.redhat.fedora.general/306278>
> we see this text:
>
> 	The DNS attacks are starting!!!
>
> 	Below is a snippet of a logwatch from last night.  Be sure all DNS
> 	servers are updated if at all possible.  The spooks are out in full
> 	on this security vulnerability in force.
>
> 	THIS IS YOUR LAST WARNING...!!!
> 	Patch or Upgrade NOW!
>
> 	...
>
> this ought to be an interesting weekend.

It's from a Georgia Tech address, so it's likely some sort of monitoring
effort by David Dagon.  I see it in my logs, too.