Forum Home
Press F1
 
Thread ID: 91508 2008-07-09 10:28:00 Supposed DNS flaw Robin S_ (86) Press F1
Post ID Timestamp Content User
687003 2008-07-09 10:28:00 I came here expecting to find some comment about the supposed DNS flaw as in



and the patch for it but a search produced nothing. Is it for real and is it important?

I tried the DNS test from the link in that story but nothing happened - I don't know if that is a positive or negative result or (probably) just a test failure.

Any comments?
Robin S_ (86)
687004 2008-07-09 10:41:00 The link didn't copy in my first post and there doesn't seem to be a way to re-do it using Edit. Hope it works this time -

=http://www.radionz.co.nz/news/latest/200807092123/366a0497

[Edit] I don't know what's happening. The link looks fine in the edit screen but on the forum page is has a double http://. Sorry folks, you'll need to copy and paste it.
Robin S_ (86)
687005 2008-07-09 10:44:00 See this:

isc.sans.org
beeswax34 (63)
687006 2008-07-09 10:44:00 The link didn't copy in my first post and there doesn't seem to be a way to re-do it using Edit. Hope it works this time -



I think this is what you are trying to show
www.radionz.co.nz (www.radionz.co.nz)

This link has more information
[url]http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/
Safari (3993)
687007 2008-07-09 10:55:00 To whoever it showed a blank box, try highlighting the box, it told me "Your name server, at 58.28.blah blah, appears vulnerable to DNS Cache Poisoning.

Ok, so now how do I fix it? I presume with the update I just did that I had to system restore back from to get the net back?
supergran (108)
687008 2008-07-09 11:04:00 To whoever it showed a blank box, try highlighting the box, it told me "Your name server, at 58.28.blah blah, appears vulnerable to DNS Cache Poisoning.

Ok, so now how do I fix it? I presume with the update I just did that I had to system restore back from to get the net back?

You don't have to do anything, it is mainly an ISP issue with updating their DNS servers.

Make sure you don't remove the latest Windows updates as there was fix in those for this issue as well.
Safari (3993)
687009 2008-07-09 11:07:00 Thanks guys. I copied the link from the web page address but when I pasted it into the posting page here it kept coming up wierdly. I tried copying and pasting it into the Firefox address box from my second post then editing out the redundant bit but then I got "can't find this page" from the Radio NZ site. Really strange. But Safari's link is to the same page and works fine. Beezwax - your story is more informative than the one I found. Robin S_ (86)
687010 2008-07-09 11:14:00 Wierder and wierder! It appears that Supergran has somehow initiated the DNS test for which there is a link in the Radionz story. Robin S_ (86)
687011 2008-07-09 11:18:00 If you mean did I uninstall update 951748, yep, to try and get online to see what the heck was going on . Will reinstall in the morning, and try the Zone Alarm fix that I found earlier, once I figure how to get my computers into safe mode . One tech built and one Compaq .


You don't have to do anything, it is mainly an ISP issue with updating their DNS servers .

Make sure you don't remove the latest Windows updates as there was fix in those for this issue as well .
supergran (108)
687012 2008-07-09 11:20:00 Robin, in that Radionz story, it said to go to http://www.doxpara.com which I did, and on the right hand side there was a dns checker, which I clicked on.


Wierder and wierder! It appears that Supergran has somehow initiated the DNS test for which there is a link in the Radionz story.
supergran (108)
1 2