Huge DNS Vulnerability

Dan Kaminsky from IO Active revealed a Huge vulnerability in DNS today. He noted that it was a DNS Cache poisoning attack and is effective against all major DNS servers. Since DNS is the glue of the internet, this vulnerability is a BIG one. Most major vendors have supplied patches already.

Check out the rest of the information here:

US Cert Vulnerability Note VU#800113
Systems Management News article
Cnet article
InformationWeek article

DNS - "critical infrastructure"

I'm going to throw this one in the "Understatement of the year" category....

"IETF DNS Working Group defines DNS as "critical infrastructure"

Check out the IGP blog entry here.