Exploit for DNS Cache Poisoning - RELEASED
drc at virtualized.org
Wed Jul 23 18:00:39 CDT 2008
On Jul 23, 2008, at 3:51 PM, Robert D. Scott wrote:
> Actually you are not missing anything. It is a brute force attack.
I haven't looked at the exploit code, but the vulnerability Kaminsky
found is a bit more than a brute force attack. As has been pointed out
in various venues, it takes advantage of a couple of flaws in the DNS
architecture. No, not simply the fact that the QID space is only 16
bits. That's part of it, but there is more. Really. I'm sure you can
find the 'leaked' Matasano Chargen description of the attack on the
> But other than just muck things up where is the motivation for a
Man-in-the-middle attacks directed at ISPs serving end users who want
to (say) get to their banks?
More information about the NANOG