A researcher saw his company affected by a flaw for which he helped to write an exploit

DNS exploit haunts researcher

Local ISP attack affects BreakingPoint

Written by Shaun Nichols in San Francisco

A security researcher who helped to develop a DNS exploit is seeing the implications firsthand after an attack on a local ISP resulted in traffic redirections for his company.

H D Moore, who crafted the original DNS exploit module, said in a blog posting that an attacker managed to run the cache-poisoning attack on a server belonging to AT&T's internet service in Austin, Texas.

Advertisement

As a result of the attack, servers at BreakingPoint Systems, the network security firm which employs Moore as director of security research, redirected employee machines from Google.com to a third-party site loaded with advertisements.

The attacks came with a dose of irony for Moore, who last week released the first working exploits for the highly-publicised DNS flaw.

The researcher downplayed the incident, scoffing at reports that his company had fallen victim to the attack.

"The attack itself was not malicious, did not load malware and had zero impact from an operational standpoint," Moore wrote.

"No systems were compromised, no data was stolen and, most importantly, the target of the attack was the ISP, not the company that I work for."

The attack is the latest attempt at an 'in the wild' attack on the so-called Kaminsky DNS flaw.

Dan Kaminsky discovered the flaw last spring and had been attempting to keep the details under wraps until a presentation at next month's Black Hat conference in Las Vegas.

Kaminsky had worked with major vendors on a fix for the flaw which led to the largest coordinated patch release in history.

His efforts were ultimately thwarted, however, when fellow researcher Halvar Flake stumbled on the vulnerability and publicly posted the details.

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

BusinessGreen.com eco-entrepreneur podcast logo

03 Dec 2008

4.07 MBEco-entrepreneur Podcast: Atlantis Resource Corporation More...

Podcast image

28 Nov 2008

12.57 MBComputing podcast - Standard Life's offshoring plans; and the prospects for government IT More...

Shaun Nichols and Iain Thomson

28 Nov 2008

7.11 MBPodcast Special: Views from the Valley More...

Poll

Microsoft

Unified Communications: Collaboration

Unified Communications: Collaboration

What is the main advantage of using collaboration technologies?

Previous poll results

Spotlight

Computer virus

15 million new malware types discovered in 2008

Kaspersky Lab puts value of cyber-crime business at $100bn   More...

Iomega BlackBelt

Review: Iomega eGo BlackBelt drive

Iomega's ruggedised hard drive promises safe portability for mobile professionals   More...

Yahoo headquarters

Yahoo saga looks set to rumble on

Carl Icahn casts doubt on new Microsoft bid, and would...  More...

Sun Microsystems

Sun takes on Adobe and Microsoft with JavaFX

Vendor claims easy creation and deployment of rich internet applications   More...

Primary Navigation