March 10, 2010

Topics


Search Site

Follow

  RSS CricketonDNS   RSS Infra20

Favorite Links


Tag Cloud


Archives

Entries for month: July 2009

NIOS Patched for DDoS Vulnerability

July 29 2009 by Cricket Liu (Infoblox)

For you Infoblox customers out there, NIOS has now been patched to address the DDoS vulnerability.

Read more...

Posted in DNS Security | NIOS | 0 comments



"Be Liberal in What You Accept"

July 29 2009 by Cricket Liu (Infoblox)

One brief note about yesterday's DDoS vulnerability:  This is the latest in a long line of vulnerabilities caused, arguably, by a development philosophy ISC employed in BIND 9, which amounts to, "If you see something funky, exit."

Read more...

Posted in DNS Security | BIND | 0 comments



New DDoS Vulnerability in BIND 9

July 28 2009 by Cricket Liu (Infoblox)

In case you haven't seen the news yet, there's a serious new vulnerability in BIND 9.  A carefully tailored dynamic update can crash your BIND 9 name server.  Administrators of BIND 9 name servers - even those that don't allow dynamic updates - are advised to upgrade immediately, as exploits are already public.  You can find more information on ISC's web site.  ISC has released BIND 9.6.1-P1, 9.5.1-P3 and 9.4.3-P3 to address the vulnerability.

Read more...

Posted in DNS Security | BIND | 0 comments