Critical flaw rocks the internet

[NightTran]

I got no answer at all so what is the deal then?

Thanks

[admin]

My ISP just sent all users an email explaining this problem and assuring them that a fix is being implemented.

I wonder if this vulnerability has been exploited or not, or is it so far just theoretical?

[Wombler]

It's also worth noting that the Microsoft patch issued yesterday disables your Internet access if you use ZoneAlarm.

There are a few (in my mind unacceptable) workarounds that may or may not work but ZoneAlarm guys are working on a patch though which should be available today.


Wombler

Edit: Updated versions of ZoneAlarm are now available from here.

I'd advise users to download these versions before they apply the Microsoft KB951748 patch.

[Wombler]

My ISP just sent all users an email explaining this problem and assuring them that a fix is being implemented.

I wonder if this vulnerability has been exploited or not, or is it so far just theoretical?

As far as I'm aware it's just theoretical.

It won't be for long though.

According to Microsoft it was discovered by security expert Dan Kaminsky and reported secretly to them so in theory no one else has known about it until now.


Wombler

[tonysmith1929]

critical flaw

Mine says safe, maybe only you yanks and Aussies get it ?????

[gonwk]

Hi Katz,

Everyone is masking their DNS number ... how come you did not mask yours!?!

G!

[copyless]

Well the day this was posted, mine showed up as vulnerable, but today it shows up as safe, so apparently the fixes are being put into place.

[cynthia]

Well the day this was posted, mine showed up as vulnerable, but today it shows up as safe, so apparently the fixes are being put into place.

Your name server, at Sat Jul 12 02:03:14 2008, appears to be safe, but make sure the ports listed below aren't following an obvious pattern.

Yes, it looks so.

[doctorhardware]

Sbc global was the same way.

[blutach]

Safe now but "make sure the ports below aren't following an obvious pattern".

Regards

[uufta]

Same as Blu, good to be safe on occasion

[gonwk]

Hi Blu,

What "ports" are you talking about!?!

G!

[copyless]

I am guessing the portals of the server, and I imagine the obvious pattern would be for example: 300300, 600600, 900900, 100100, 400400, and so on. This would allow you to follow the pattern of the movement.

I believe you get the vulnerable signal when all the requests that are sent are answered from the same port.

But I do not know this, just a hypothesis, hopefully we will get a better understanding.

[katzdvd]

Hi Katz,

Everyone is masking their DNS number ... how come you did not mask yours!?

That is a "dummy" number, not mine. I don't believe anyone would have a DNS number of 12.34.56.789. (I don't think so, anyway)

[Chewy]

Zlob.dnschanger

this dns problem has been showing up this last month

I was originally infected last week and decided that I would format my computer and install a fresh copy of Vista. As soon as I connected to the internet this virus was back on my computer. I tried another clean install today and kept the computer disconected from the internet during the instalation process. I ran Spybot and it came back clean so the virus was gone. I then installed AVG Free antivirus and Outpost firewall before I reconected to the internet.

As soon as I was conected the virus returned. I dont know how it returns (either through my home network or from the internet) but I really need a program that will prevent it.

http://blog.washingtonpost.com/securityfix/2008/06/malware_silently_alters_wirele_1.html

Lock your router tight