Zero Day

Attack code published for DNS flaw

Posted in:

Arbitrary Code Execution
Botnets
Browsers
Data theft
Exploit code
Locally Running Web Servers
Metasploit
Microsoft
Patch Watch
Pen testing
Responsible disclosure
Zero-day attacks

Exploit posted for DNS cache poisoning vulnerability

The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool. According to Metasploit creator HD Moore (left), who teamed up with researcher |)ruid to create the exploit, a DNS service has also been created to assist with the exploit. [ SEE: Vulnerability disclosure gone awry: Understanding the DNS debacle ] The code, available here, takes aim at known deficiencies in the DNS protocol and common DNS implementations that aid in serious cache poisoning attacks.

This exploit caches a single malicious host entry into the target nameserver. By causing the target nameserver to query for random hostnames at the target domain, the attacker can spoof a response to the target server including an answer for the query, an authority server record, and an additional record for that server, causing target nameserver to insert the additional record into the cache.

In an IM exchange, Moore told me his exploit takes about a minute or two to poison a DNS cache but said he is working to improve it in version 2.0. Kaminsky in on record as saying it is possible to launch a successful attack in a matter of seconds. Patch now! Please.

posted by Ryan Naraine
July 23, 2008 @ 2:55 pm

Previous Post: ‘Spam King’ escapes from federal prison
Next Post: |)ruid and HD Moore release part 2 of DNS exploit

Last 10 posts:

Opera patches 'extremely severe' security hole (11-23)
Exploit published for critical IE 7 zero-day flaw (11-23)
Inside the Google Chrome OS security model (11-19)
Microsoft finds security hole in Google Chrome Frame (11-19)
Mozilla locks out rogue Firefox add-ons (11-18)
Thousands of web sites compromised, redirect to scareware (11-17)
Microsoft confirms 'detailed' Windows 7 exploit (11-16)
Man-in-the-middle attacks demoed on 4 smartphones (11-13)
Microsoft bracing for malware attacks from embedded fonts (11-12)
Apple Safari exposes Windows to drive-by download attacks (11-11)