Archive for 'Infrastructure' Category
DNS cache poisoning made easy
Filling a DNS server’s cache with fake records just got a whole lot easier. Two flaws in the BIND domain name server (DNS) software were announced today that make the normally hit-or-miss practice of stuffing name servers full of false info into a sure thing. “This is a powerful attack, as it retracts the security [...]
Read the rest of this entry...Hardening DNS with the Cymru Secure BIND template
When we go into a new client’s site one of the first things we look at is configuration of local DNS servers. DNS is key to the security of the entire organization, yet what we usually find are servers wide open to attack. The most common issues we find are things like running an ancient [...]
Read the rest of this entry...