Serious Hole in Internet's DNS Software Opens Door to Pharming Attacks
Users of the software, which include ISPs and large companies, are being advised to patch the software immediately.
By
Jeremy Kirk
That means a user could be directed to a fraudulent Web site, even though the user typed the correct address in their browser. The site could then try to exploit other security weaknesses in a user's PC, or trick them into providing sensitive information.
Because the transaction ID is not random and can be figured out, an attacker could execute the attack with as few as a single attempts, Klein wrote. "This is a powerful attack, as it retracts the security of BIND 9 to almost where it was over a decade ago," he said.
Internet
Articles
Receive the latest security news as it breaks.
