A researcher saw his company affected by a flaw for which he helped to write an exploit

DNS exploit haunts researcher

Local ISP attack affects BreakingPoint

Shaun Nichols in San Francisco

A security researcher who helped to develop a DNS exploit is seeing the implications firsthand after an attack on a local ISP resulted in traffic redirections for his company.

H D Moore, who crafted the original DNS exploit module, said in a blog posting that an attacker managed to run the cache-poisoning attack on a server belonging to AT&T's internet service in Austin, Texas.

Advertisement

As a result of the attack, servers at BreakingPoint Systems, the network security firm which employs Moore as director of security research, redirected employee machines from Google.com to a third-party site loaded with advertisements.

The attacks came with a dose of irony for Moore, who last week released the first working exploits for the highly-publicised DNS flaw.

The researcher downplayed the incident, scoffing at reports that his company had fallen victim to the attack.

"The attack itself was not malicious, did not load malware and had zero impact from an operational standpoint," Moore wrote.

"No systems were compromised, no data was stolen and, most importantly, the target of the attack was the ISP, not the company that I work for."

The attack is the latest attempt at an 'in the wild' attack on the so-called Kaminsky DNS flaw.

Dan Kaminsky discovered the flaw last spring and had been attempting to keep the details under wraps until a presentation at next month's Black Hat conference in Las Vegas.

Kaminsky had worked with major vendors on a fix for the flaw which led to the largest coordinated patch release in history.

His efforts were ultimately thwarted, however, when fellow researcher Halvar Flake stumbled on the vulnerability and publicly posted the details.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Hacker

First DNS attacks reported

User reports cache-poisoning attempt

Hacker

Exploit emerges for DNS flaw

First attack tool created for vulnerability

Major DNS flaw revealed

Experts sound alarms over early disclosure

Microsoft issues monthly security pack

Nothing 'critical' about July update

Related whitepapers

Related jobs

Most watched

Social networking

Summit: How businesses should manage their brands online

In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies

RIM discusses new developer tools

Blackberry exec on the latest offerings for programmers

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Alcatel-Lucent logo

Summit: Networks swamped by information overload

Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can...

EU flag

Breach notification laws get green light

Privacy rights strengthened in Europe

Richard Thomas

Summit: Richard Thomas advises on handling the data deluge

Former Information Commissioner speaks out on government databases and data...

oracle sun

War of words escalates between EU and Oracle

Commission comes out fighting after criticism from Oracle and Washington

Primary Navigation