Head-Fi.org › Forums › Misc.-Category Forums › Members' Lounge (General Discussion) › July 8th, 2008: Important DNS Security Vulnerability
New Posts  All Forums:Forum Nav:

July 8th, 2008: Important DNS Security Vulnerability

post #1 of 8
7/10/08 at 8:44am
Thread Starter 
I took a quick scan of recent topics and didn't see this yet mentioned, but thought it was worthy of a look. If you haven't patched yourself yet, you may want to consider doing so soon as it looks like a fairly important vulnerability.

Here's a little more reading on the subject:

Dan Kaminsky Discovers Fundamental Issue In DNS: Massive Multivendor Patch Released | securosis.com

One note: when I patched my Windows XP installation, I lost my internet connection immediately after reboot. This was due to my version of ZoneAlarms Firewall. If you use ZoneAlarms, you should update to the latest version before you patch your XP installation. If you've already installed, you can temporarily set the "internet zone" to medium, which will allow you to grab the new version and upgrade and then put the settings back on high.
Reply
post #2 of 8
7/10/08 at 10:39am
Thanks for posting this! I installed the Windows Update and lost my Internet and couldn't remember if I had my Internet Zone set to High or Medium in Zone Alarm. So I set it to Medium and went on my way. If you hadn't posted this, I wouldn't have known about the Zone Alarm update because the Auto Update feature in ZA didn't notify me of the new version.
Reply
post #3 of 8
7/10/08 at 8:50pm
How timely. Appreciate the info!
Reply
post #4 of 8
7/10/08 at 9:01pm
Interesting news... I can't seem to find a link to the patch... Where is it?

Edit: DW, found it. For those who have disabled windows updates, the patch can be downloaded here http://www.softwarepatch.com/windows...2008-july.html
Reply
post #5 of 8
7/10/08 at 10:22pm
I'm an intern at an IT consulting company and this patch has killed the TCP/IP stack on some scattered machines (including a couple servers), preventing them from receiving SYN/ACKs on TCP port 80 connections. These machines exhibit the same behavior with the firewall turned off, and the issue is fixed with a system restore.

Just an FYI... turn on system restore before applying this patch!

Edit: In english, patch + internet = no.
Reply
post #6 of 8
7/10/08 at 10:33pm
Hmm... I just patched and my internet works fine.
Reply
post #7 of 8
7/10/08 at 11:48pm
My internet died with the patch, even with zone alarm off...
Reply
post #8 of 8
7/10/08 at 11:51pm
I don't use zonealarm. Instead I use Comodo. Maybe that's why its not broken?
Reply
New Posts  All Forums:Forum Nav:
  Return Home
Head-Fi.org › Forums › Misc.-Category Forums › Members' Lounge (General Discussion) › July 8th, 2008: Important DNS Security Vulnerability