The attack was reported by a user named James Kosin to a Fedora Linux mailing list.
Kosin posted a log which he said was gathered Thursday night. The attacker attempts to access the server's cache for entries to such sites as myspace, ebay and Wachovia.
The attack attempts to target a vulnerability in the Domain Name System in which an attacker could alter the cache on a DNS server to redirect site requests to malicious third-party sites.
"The spooks are out in full on this security vulnerability in force. Patch or upgrade now!" wrote Kosin.
Industry experts, including Kaminsky himself, have issued similar warnings to administrators. Kaminsky intentionally held off on releasing the details of the flaw until vendors could patch it.
Exploit code for the vulnerability was posted earlier this week as a module for the Metasploit framework.
Though experts estimate that most major ISPs and vendors have patched the flaw, poorly-maintained DNS servers could still be open to the attack.
First DNS attacks reported
By
Shaun Nichols
on
Jul 26, 2008 1:18PM
The first attacks to on the Kaminsky DNS vulnerability have been reported.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why rethinking your CMS is crucial for customer retention
Promoted Content
Why Genworth Australia embraced low-code software development
Promoted Content
How to turn digital complexity into competitive advantage
Promoted Content
Winning strategies for complaints and disputes management in financial services
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
.png&h=146&w=240&c=1&s=0)
