[mattc at guarded.net: Major DNS cache poisoning at Verisign/WorldNIC]

Alan Clegg alan at clegg.com
Wed Mar 20 02:53:26 UTC 2002


----- Forwarded message from "Matthew F. Caldwell" <mattc at guarded.net> -----

Date: Tue, 19 Mar 2002 14:18:56 -0500
From: "Matthew F. Caldwell" <mattc at guarded.net>
Subject: Major DNS cache poisoning at Verisign/WorldNIC
To: <incidents at securityfocus.com>

Just to let everyone know, there has been some major DNS cache poisoning going on at Verisign apparently done by some Brazilians ("Web Pirates") for web site defacements. If your parking your DNS at worldnic.com (netsol/verisign) you might want to see if you site has been redirected to 64.225.154.175 (owned by Interland of Atlanta) using random DNS servers. 

Don't you love UDP.

Matthew F. Caldwell, CISSP 
Chief Security Officer 
GuardedNet, Inc 


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


----- End forwarded message -----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 230 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20020319/34643088/attachment.sig>


More information about the NANOG mailing list