Newburyport, MA - July 15, 2008 – DNSstuff.com (www.dnsstuff.com) today announced DNS Vulnerability Check, an enhanced tool that verifies whether your DNS servers are vulnerable to the critical DNS flaw discovered earlier this year by Dan Kaminsky, Director of Penetration Testing for IOActive. The flaw allows an attacker to poison a DNS server cache by injecting it with forged data – making it such a significant flaw that US-CERT, the government’s cyber security arm, and 80 vendors including Nominum, Microsoft and Cisco, coordinated together to issue a patch. You may run this tool free at www.dnsstuff.com starting Wednesday, July 16, 2008.

"This is about as serious as you can get,” said Dan Kaminsky. “DNSstuff offered to help out and enhance this tool to better validate any DNS server. It’s a team effort, no doubt. ”

"This is significant but it's under control, now we just need users to deploy the patches that have been built,” said Paul D. Parisi, CTO of DNSstuff.com. “This won’t be the last flaw discovered, but this is definitely one of the most critical. It’s no secret that DNS is part of almost all communications on the Internet and that it is being pushed to its limits. This is why DNSstuff.com is focused on how to best manage DNS in order to avoid major email and web problems. DNSreport is the most comprehensive DNS health check available to validate your configuration. We quickly pinpoint the problem and provide steps to fix it.”

“This particular DNS attack is without a doubt the most dangerous discovered in the DNS to date,” said Paul Mockapetris, Inventor of DNS. “It is imperative that IT managers for organizations Worldwide update their DNS software right away. The update on caching servers’ perimeters will ensure optimal performance, and the new tool provided by DNSstuff.com is just what companies need to stay on top of their DNS, and prevent them from becoming victims of damaging exploits such as the one discovered by Kaminsky.”

DNS is a rising attack vector

Each DNS server is susceptible to many forms of compromise, and must constantly be monitored to mitigate security risks. Steps must be taken to mitigate the risks. The biggest monitoring challenge right now is that there are so many DNS servers controlled by so many busy people. If IT managers are not diligent in mitigating risks, or make an error – a serious problem can quickly propagate bad information throughout the Internet. Cybercriminals constantly poke, prod and hack at finding weak or open DNS servers they can exploit.

About DNSstuff.com

DNSstuff helps you configure, monitor and resolve email, internet and connectivity issues. These on-demand tools and alerts services reduce downtime and minimize domain vulnerability. DNSstuff solutions combine the effectiveness of command line tools with the efficiency of point tools. DNSstuff.com users are a uniquely large, knowledgeable and trusted community of IT professionals, and its resources are featured in several authoritative books on the Internet which can be found at www.dnsstuff.com.

You can learn more about Dan Kaminsky and this DNS flaw by visiting www.doxpara.com.

PR Contact


This email address is being protected from spambots. You need JavaScript enabled to view it.

Press Room
 
 

Press Releases

Monday, 08.31.09

DNSstuff.com launches Industry's first Mail Server Test Center - Unequaled Mail Server testing


Mail Server Test Center saves time with detailed MX dashboard results

Read more...
Thursday, 08.27.09
 Read more...
Thursday, 03.19.09
DNSstuff.com offers Trusteer Rapport product to help users boost their defenses against online fraud

Proven online banking security technology now available for all the sites users log into

Read more...
Wednesday, 02.11.09
DNS expert calls for preparedness in face of potentially more frequent and more damaging attacks on DNS

DNSstuff.com unveils one of the first public root server time maps to track performance and minimize business risk; Recent survey data reveals that 70% of all DNS servers have one or more improperly configured settings

Read more...
Tuesday, 07.15.08

DNSstuff collaborates with Dan Kaminsky to enhance tool to test DNS servers againgst known security flaw

Tool available at DNSstuff.com to immediately check and update your DNS

Read more...
Monday, 06.23.08

DNSstuff launches DNSalert 2.0 service offering powerful, customizable domain monitoring delivered to your desktop

88 percent of DNSalert customers confirmed proactive DNS management allows thtem to sleep better at night

Read more...
Tuesday, 02.19.08

DNSstuff.com presents to Virtual Global Taskforce Fighting Child Exploitation, announces Interpol Affiliation

DNSstuff Addresses International Law Enforcement, Service Providers, Child Protection Agency Experts to Combat Online Abuse

Read more...
Friday, 01.18.08

DNSstuff.com Helps Sony Pictures "Untraceable" Reflect Real-World Internet Security Issues and Cybercrime Prevention Techniques

DNSstuff.com Experts Available for Comment on On-Line Crime Detection Read more...

Tuesday, 08.07.07

Survey data shows that 62% of IT Professionals go 2 days or more before realizing they are on a Blacklist causing irreparable harm to reputation and commerce

DNSstuff’s new RBLalert service provides customers around the clock IP monitoring – detailed query to over 130 RBLs

Read more...
Monday, 04.30.07

DNSstuff unveils industry's first DNS resource center; announces content partnership with Infoblox

New portal assists IT professionals with DNS information, tools, and insights through user-driven content, third party expert information and educational resources

Read more...

Editorial Coverage

Thursday, 04.23.09Network World
DNS plays a role in Craigslist killer case
Denise Dube

» Read Article

Monday, 08.18.08Network World
DNSstuff, diagnoses DNS, er, stuff
Mark Gibbs

» Read Article

Wednesday, 07.09.08Searchnetworking.com
DNS management becoming critical to businesses but poorly understood
Shamus McGillicuddy, News Editor
» Read Article

Wednesday, 06.25.08Network World
Alerting service reveals DNS errors
Denise Dube, News Editor

» Read Article

Tuesday, 06.24.08Dark Reading
DNS Alerts-as-a-service
Kelly Jackson Higgins, Senior Editor
» Read Article

Wednesday, 02.18.08WCVB TV Channel 5
Who is Googling you? - A New Technology Lets Consumers Find Out
Kelley Tuthill, Newscenter 5

» Read Article

Wednesday, 02.06.08The Boston Globe
Firm's Web tools a hit in Hollywood - and at FBI
Hiawatha Bray, Globe Staff

» Read Article

Wednesday, 01.23.08Network World
At the movies with network technology: How factual is technology in the movies?
Denise Dube, News Editor
» Read Article

Friday, 01.18.08Network World
DNS tools play key role in Hollywood thriller 'Untraceable': FBI agents in Sony Pictures' upcoming 'Untraceable' movie turn to tools from DNSstuff to solve crime
Denise Dube, News Editor
» Read Article

Monday, 12.03.07DarkReading.com
New DNS Technology Flags Bad Guys Before They Act: DNSstuff has filed for a patent for the new security technology
» Read Article