Major DNS flaw could disrupt the Internet

Discovery leads to CERT advisory and multi-vendor DNS patch issued today

A fundamental flaw in the Domain Name System protocol that would allow an attacker to massively disrupt the Internet has been discovered by a researcher, prompting CERT to issue an alert and major DNS software vendors to issue patches today.

DNS servers across the 'Net and in corporate networks translate host names to IP addresses, and vice versa, allowing for normal Internet use. But a flaw in the underlying protocol leaves them open to being hijacked. And according to the researcher who made the discovery of the critical DNS flaw, Dan Kaminsky, director of penetration testing at IOActive, it's now up to ISPs and corporate network managers to apply the DNS patch software patches released today.

Hear Dan Kaminsky's explanation of the flaw, in our Newsmaker of the Week podcast. 

Page 2 of 2

"If he had decided to sell it, he would have made hundreds of thousands of dollars," Moss concluded.

Read more about security in Network World's Security section.