Microsoft to patch zero-day DNS flaw

TalkBack 8 of 10:

Next »

« Previous

• Thread View
• Flat View

Loverock, you are an idiot...

A *remote, unauthenticated root compromise* on a domain name server is "nothing to worry about"?

The workarounds, simply put... sucked. They required that you cripple remote management entirely to be protected. Sure, you can block RPC at the perimeter, but that only protects you from the internet -- not your own employees in an enterprise scenario.

Bearing in mind that many DNS servers are domain controllers as well, that's an unacceptable threat condition. Being forced to choose between "break access to DNS management" and "allow remote root access to your entire domain by anyone who can access your internal LAN" is not good threat posturing for Microsoft customers.

There's nothing ceremonial about this patch. They cost about a million dollars each to make and release, and enterprises spend a good sum deploying them... for a reason. They make their networks safer with less functional breakage than Microsoft's notoriously bad workarounds.

Posted by: SecurityGeek_z   Posted on: 05/07/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now