CircleID

The United States Computer Emergency Readiness Team (US-CERT) has acknowledged that they are aware of the publicly available exploit code for a cache poisoning vulnerability in common DNS implementations. US-CERT is re-emphasizing the urgency of patching vulnerable DNS systems:

"Exploitation of this vulnerability may allow an attacker to cause a nameserver's clients to contact the incorrect, and possibly malicious hosts for particular services. As a result, web traffic, email and other important network data could be redirected to systems under the attacker's control. US-CERT strongly urges administrators to patch affected systems immediately."

An exploit code for the flaw allowing insertion of malicious DNS records into the cache of target nameservers was made public by a source called Metasploit very recently.

Related topics: Cyberattack, Cybercrime, DNS, Security