For those who may not pay as much attention to such things but run any infrustructure and thus probably should, you might want to see this:
Serious flaw found in Domain Name System - DNS at Risk From Multivendor Cache Poisoning
http://www.webmasterworld.com/webmaster/3693967.htm
Pretty much every DNS provider has updated their software for concurrent release and it is highly recommended you update servers under your control. Given that around half the planet still apparently allows their DNS servers to act as open resolvers (which should certainly not be the case these days), hopefully some will heed at at least this message to get the software updated.
Even if you are simply a regular user and want to learn if your DNS provider (for your own client computer) is up to date and to learn if the DNS server you use is vulnerable, you can visit this:
http://doxpara.com/
Some additional information can be found here:
http://isc.sans.org/
And finally, if you happen to be a ZoneAlarm / ZoneLabs user, you might want to look at this *before* applying the most recent MS patches to your XP computer(s) (ZA issue does not impact Vista). ZoneLabs has released new versions of software that are compatible with the current level patched XP:
http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html
And of course, if your plans ever call for travel, we hope you consider:
TZ.Com - Travel Zippy
Happy updating.
-Commerce
Serious flaw found in Domain Name System - DNS at Risk From Multivendor Cache Poisoning
http://www.webmasterworld.com/webmaster/3693967.htm
Pretty much every DNS provider has updated their software for concurrent release and it is highly recommended you update servers under your control. Given that around half the planet still apparently allows their DNS servers to act as open resolvers (which should certainly not be the case these days), hopefully some will heed at at least this message to get the software updated.
Even if you are simply a regular user and want to learn if your DNS provider (for your own client computer) is up to date and to learn if the DNS server you use is vulnerable, you can visit this:
http://doxpara.com/
Some additional information can be found here:
http://isc.sans.org/
And finally, if you happen to be a ZoneAlarm / ZoneLabs user, you might want to look at this *before* applying the most recent MS patches to your XP computer(s) (ZA issue does not impact Vista). ZoneLabs has released new versions of software that are compatible with the current level patched XP:
http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html
And of course, if your plans ever call for travel, we hope you consider:
TZ.Com - Travel Zippy
Happy updating.
-Commerce
