Security Incidents mailing list archives

Major DNS cache poisoning at Verisign/WorldNIC


From: "Matthew F. Caldwell" <mattc () guarded net>
Date: Tue, 19 Mar 2002 14:18:56 -0500

Just to let everyone know, there has been some major DNS cache poisoning going on at Verisign apparently done by some 
Brazilians ("Web Pirates") for web site defacements. If your parking your DNS at worldnic.com (netsol/verisign) you 
might want to see if you site has been redirected to 64.225.154.175 (owned by Interland of Atlanta) using random DNS 
servers. 

Don't you love UDP.

Matthew F. Caldwell, CISSP 
Chief Security Officer 
GuardedNet, Inc 


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


Current thread: