FYI…

- http://isc.sans.org/diary.php?storyid=1305
Last Updated: 2006-05-03 02:46:17 UTC
"DNS cache poisoning report. For background you may wish to review this report http://isc.sans.org/presentations/dnspoisoning.php
and this issue about BIND 4 or 8 not being suitable as forwarders http://isc.sans.org/diary.php?date=2005-04-28

Next, a request. PLEASE review your dns servers logs and cache for [removed] If you find it listed as authoritative for .com please send us an email with a dump of the dns cache. Directions for dumping, cleaning and protecting your cache are available in the write-up above.

Serverhome.com ([removed]) is being reported for Kashpureff-style cache poisoning for the.com TLD.

This report shows there are about 16k domains hosted on this server.
http://www.ipwalk.com/webhost/total_domain…/serverhome.com

Be careful if you look up one of those domains there is a good chance you will see extra RR records including ones that claim they are authoritative for .com …"


(Much more detail at the ISC URL above.)

:ph34r: