Hackers get hold of critical Internet flaw

rpm

Admin

Staff member

Joined

Jul 22, 2003

Messages

66,805

Reaction score

5,057

Location

Johannesburg

• Jul 25, 2008

• #1

Hackers get hold of critical Internet flaw

Internet security researchers on Thursday warned that hackers have caught on to a "critical" flaw that lets them control traffic on the Internet.

Click to expand...

 

L

lilGr

Expert Member

Joined

Apr 23, 2008

Messages

1,451

Reaction score

2

Location

JHB, Constantia ๏̯͡๏﴿

• Jul 25, 2008

• #2

 

O

Olly

Active Member

Joined

Feb 6, 2008

Messages

38

Reaction score

0

• Jul 25, 2008

• #3

There is some tools available already to take advantage of this ...

Here is the link from US-CERT

http://www.kb.cert.org/vuls/id/800113

And some code that tests this vulnerability...

http://www.caughq.org/exploits/CAU-EX-2008-0002.txt

 

F

FaNIX

Expert Member

Joined

Jan 15, 2006

Messages

2,249

Reaction score

7

Location

Pretoria

• Jul 25, 2008

• #4

mmm, funky code

 

M

McGuywer

Executive Member

Joined

Jun 28, 2006

Messages

8,203

Reaction score

1,515

Location

Infinity and Beyond

• Jul 25, 2008

• #5

I think this is serious. Would this effect a DHCP server?

 

Scooby_Doo

Honorary Master

Joined

Sep 4, 2005

Messages

12,247

Reaction score

6,270

Location

In a Box, Next to a tree.

• Jul 25, 2008

• #6

no just dns.

 

O

Olly

Active Member

Joined

Feb 6, 2008

Messages

38

Reaction score

0

• Jul 25, 2008

• #7

Its amazing how long it was kept quiet since the initial discovery... you would think that someone would have leaked it earlier...

 

M

McGuywer

Executive Member

Joined

Jun 28, 2006

Messages

8,203

Reaction score

1,515

Location

Infinity and Beyond

• Jul 25, 2008

• #8

Olly said:

Its amazing how long it was kept quiet since the initial discovery... you would think that someone would have leaked it earlier...

Click to expand...

Very true.



Thanks Scooby.

 

L

LancelotSA

Banned

Joined

Aug 20, 2007

Messages

14,713

Reaction score

5

Location

Stunning Africa

• Jul 25, 2008

• #9

So where is this patch that they talk of?

 

O

Olly

Active Member

Joined

Feb 6, 2008

Messages

38

Reaction score

0

• Jul 25, 2008

• #10

They have released the patch already - but did not tell people that this was the issue being fixed.

They believed that it will make it harder for people to reverse engineer the patch if they didnt know what exactly was being fixed...

http://securosis.com/2008/07/08/dan...ue-in-dns-massive-multivendor-patch-released/

 

LazyLion

King of de Jungle

Joined

Mar 17, 2005

Messages

107,490

Reaction score

10,056

Location

District 9

• Jul 25, 2008

• #11

must I reboot the internet?

 

T

The_Unbeliever

Honorary Master

Joined

Apr 19, 2005

Messages

103,193

Reaction score

10,233

Location

Nkaaaaandla

• Jul 25, 2008

• #12

Garyvdh said:

must I reboot the internet?

Click to expand...

 

|tera|

Master of Messengers

Joined

Mar 31, 2006

Messages

25,903

Reaction score

2,952

Location

terra

• Jul 25, 2008

• #13

One of the first attributes of a hacker, if they don't know the secret/answer, they politely just ask for it

 

eltherza

Expert Member

Joined

Apr 19, 2007

Messages

3,332

Reaction score

2

Location

Pietermaritzburg

• Jul 26, 2008

• #14

This attack is being weaponized out in the field.

Click to expand...

Should I hide under my desk?

 

mercurial

MyBB Legend

Joined

Jun 12, 2007

Messages

40,900

Reaction score

2,693

Location

/\/¯¯¯¯¯\/\

• Aug 8, 2008

• #15

http://www.webuser.co.uk/news/265133.html

 

antowan

Honorary Master

Joined

Nov 1, 2003

Messages

13,172

Reaction score

299

Location

Unknown

• Aug 8, 2008

• #16

lilGr said:

Click to expand...

You look guilty!