Black Hat: DNS Flaw Much Bigger Than Thought

(Gawkwire.com) Security researcher Dan Kaminsky Wednesday revealed details on the DNS vulnerability he discovered earlier this year, suggesting its potential impact is far more serious than just about anyone realized.

Speaking to a packed room of Black Hat conference attendees, Kaminsky, director of penetration testing for IOActive, said that in addition to being used for so-called cache poisoning attacks, the DNS vulnerability could also be used to exploit IPSec VPNs, SSL certification, automatic software update systems, spam filters and voice over IP systems.

But that's far from a complete list of the systems that could be affected, and Kaminsky repeatedly used the term "domino effect" in describing the vulnerability's far reaching potential to wreak havoc. ... Go to source