Re: Exploit for DNS Cache Poisoning - RELEASED

[Florian Weimer <fw () deneb enyo de>]

* Paul Vixie:

> in <http://permalink.gmane.org/gmane.linux.redhat.fedora.general/306278>
> we see this text:
>
>       The DNS attacks are starting!!!
>
>       Below is a snippet of a logwatch from last night.  Be sure all DNS
>       servers are updated if at all possible.  The spooks are out in full
>       on this security vulnerability in force.
>
>       THIS IS YOUR LAST WARNING...!!!
>       Patch or Upgrade NOW!
>
>       ...
>
> this ought to be an interesting weekend.

It's from a Georgia Tech address, so it's likely some sort of monitoring
effort by David Dagon.  I see it in my logs, too.