Connect with us
Categories:
X

Technology

Unsecure DNS resolvers provide a significant danger of website hijack

Published

on

Unsecure DNS resolvers provide a significant danger of website hijack
Share this post:

Hidden DNS (domain name system) resolvers create a means for carrying out email redirection and account takeover attacks, security researchers warn.

In a technical blog post, SEC Consult explains how it’s possible to manipulate the DNS name resolution of these so-called closed DNS resolvers using a variant of cache poisoning attacks (PDF), which were first unveiled by celebrated network security researcher Dan Kaminsky way back in 2008.

Cache from chaos

Previous research by SEC Consult has shown how it’s possible for an attacker to take over user accounts of web applications by manipulating DNS name resolution.

Closed DNS resolvers are used by numerous hosting providers and other internet service providers (ISPs) to provision services to their clients. As the name suggests, closed DNS resolvers reside on closed networks or intranets.

However, ‘closed’ is a bit of a misnomer in the context of SEC Consult’s research because the researchers have shown how it might be possible for external actors to abuse the functionalities of web applications to readily attack closed resolvers.

They found that attack reconnaissance is possible by exploiting how closed DNS resolvers interact with spam protection mechanisms on the open internet.

This could help an attacker understand DNS security features like source port randomization, DNSSEC, IP fragmentation, and, more simply by exploiting registration, password-reset, as well as newsletter functionalities of web applications that rely on closed resolvers.

Scouring the web

SEC Consult used two open source tools – DNS Reset Checker and the DNS Analysis Server – to analyze DNS traffic from targeted systems in order to identify vulnerabilities.

In practical terms, this attack reconnaissance work involved sending emails to some well-known domains and specifying the analysis domain as the sending domain. This allowed the researchers to identify thousands of systems that used static source ports, a security oversight that left them vulnerable to Kaminsky-style attacks.

“After sending emails to roughly 50k domains, we’ve received and analyzed DNS data for approximately 7,000 of them,” SEC Consult explains. “Among those 7,000 domains, at least 25 were using static source ports. By going down the rabbit hole again, thousands of more domains using static source ports were discovered.”

None of a sample of 25 vulnerable resolvers were using or enforcing additional security features such as DNSSEC, SEC Consult discovered.

Affected services were running behind domains operated by both small and big businesses, and sites delivering governmental services and political campaigns.

DNS cache poisoning insecurities can be abused to manipulate records and redirect emails – a security shortcoming that would allow an attacker to abuse the password reset functionalities of WordPress and Joomla installations, among others.

The attack technique can be used to hijack even a fully patched WordPress installation, SEC Consult was able to demonstrate.

The infosec firm has held back on publicly releasing the exploit code it developed to attack WordPress systems, because of concerns that awareness of the issue is low, which would leave many web-based systems accessible through closed DNS resolvers open to attack.

SEC consult spoke to ISPs, hosting providers, and computer emergency response teams (CERTs) about the issue in the months prior to going public with its findings last week.

Cache out

Independent DNS security experts said that the research highlighted a valid concern.

Cricket Liu, chief DNS architect at Infoblox, told Daily Swig: “I don’t think this is particularly novel – we talked about this sort of thing back in the heyday of the Kaminsky vulnerability – but it’s relevant because there are still some DNS servers out there that don’t use source port randomization.”

Containing exotic attacks

Even though legacy Kaminsky attacks are definitely not the ‘next big thing’ it would be unwise to dismiss the issue as unfashionable, according to SEC Consult.

Timo Longin, a security consultant at SEC Consult, told Daily Swig: “The DNS provides very exotic and unknown attack vectors that should be brought to the attention of the infosec community! For example, we found some hosting providers where it would potentially be possible to compromise all hosted servers by password-reset hijacking users via the providers’ control panel”.

To safeguard systems, vulnerable DNS resolvers must be patched and configured securely. Some best practices for securing your own DNS resolvers can be found at Google and at DNS flag day. Alternatively, large public DNS providers such as Google, Cloudflare, or Cisco can also be used.

Countermeasures for new DNS attacks are usually implemented quickly by these large providers, according to SEC Consult.


Get More Stories Like This On: Facebook: @AllNaijaEntertainment, Twitter: @AllNaijaEntertainment

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Angry youths chase Elumelu away as they disrupt PDP campaign in Delta
News9 hours ago

Angry youths chase Elumelu away as they disrupt PDP campaign in Delta

Lai Mohammed
News9 hours ago

FG recovers over N120bn from proceeds of crime – Lai Mohammed

News9 hours ago

Tinubu says Peter Obi, Atiku lack track record to be president

Atiku Abubakar
News9 hours ago

Plateau PDP set to receive Atiku

Peter Obi praises Gov Uzodimma’s leadership style
News9 hours ago

Peter Obi praises Gov Uzodimma’s leadership style

Entertainment10 hours ago

‘Free Mind’ by Tems enters 20th week on Billboard Hot 100

Kizz Daniel
Entertainment10 hours ago

Buga by Kizz Daniel is the most searched song in Nigeria in 2022

News10 hours ago

NJC Reinstates Justice Ofili-Ajumogobia As Judge Of Federal High Court

Man sentenced to 21 years in prison for stealing Lady Gaga's dogs
Entertainment10 hours ago

Man sentenced to 21 years in prison for stealing Lady Gaga’s dogs

NNPC Ltd to disclose new asset base – Kyari
News10 hours ago

Nigeria Records ₦‎16 Trillion Worth Of Crude Oil In 9 Months

Entertainment10 hours ago

Broda Shaggi begs African fathers to hug their children

News14 hours ago

Chatham House: APC slams Dele Momodu over comment on Tinubu

News14 hours ago

Samuel Eto’o Apologises After Physically Attacking YouTuber

News14 hours ago

N-Power Fraud: D’banj Arrested & Detained – ICPC Confirms, Releases Statement

News14 hours ago

FG: Second Niger Bridge will open to traffic Dec 15

News14 hours ago

2023 Polls Won’t Mar Nigeria – Sultan, CAN, SGF

Education14 hours ago

ASUU Strike: CONUA threatens to sue FG over withheld salaries

Sports14 hours ago

Eden Hazard announce retirement from international football

News17 hours ago

2023: APC Has Failed Northerners, Muslim-Muslim Ticket Won’t Work – Shagari

News21 hours ago

Teleprompters In Sight As Tinubu Spoke At Chatham House – Jaafar Shares Photo

Buhari
News21 hours ago

2023: No manipulations of any form will be allowed, Buhari vows

News21 hours ago

Kano Hisbah to destroy 18,000 bottles of beer

Entertainment22 hours ago

Emancipation: Will Smith pulls you in with gritty realities of slavery era[Review]

Will Smith hopes ‘brutal’ depictions of slavery in Emancipation are ‘not in vain’, as he attends premiere in London
Entertainment22 hours ago

I became more alive by facing my pain – Will Smith

Luis Enrique
Sports22 hours ago

Spain manager full of praise for his players despite shock Morocco loss

Goncalo Ramos
Sports22 hours ago

Goncalo Ramos reacts after taking Cristiano Ronaldo’s place in Portugal team

Frank Leboeuf
Sports22 hours ago

Frank Leboeuf aims bizarre dig at Kieran Trippier

Sports22 hours ago

Can the Three Lions outsmart France’s unstoppable star player?

Horoscope22 hours ago

Your daily horoscope for Wednesday, December 7, 2022

Sports1 day ago

FIFA World Cup 2022: Goncalo Ramos nets first hat-trick of 2022 FIFA World Cup as Portugal trash Switzerland

Sports1 day ago

FIFA World Cup 2022: Yassine Bono the hero as Morocco knocks Spain out of World Cup

Godwin Emefiele
News1 day ago

CBN Drops ATM Withdrawal Limit To ₦‎20k/Day

News1 day ago

‘TikTok Challenge’ Circulates Info-Stealing Malware – NCC

DOWNLOAD Complete Wednesday (TV series) (2022 film) Season 1 Subtitles File [English SRT] 2022
Movie Subtitle1 day ago

DOWNLOAD Complete Wednesday (TV series) (2022 film) Season 1 Subtitles File [English SRT] 2022

The vast network of antennas will form the world’s largest radio telescope
Technology1 day ago

The largest radio telescope in the world’s construction gets underway

News1 day ago

FG releases new curriculum for universities in Nigeria

News1 day ago

What drives Atiku Abubakar’s desire to sell oil refineries

Wike and Dogara criticize one another for supporting Atiku
News1 day ago

Wike and Dogara criticize one another for supporting Atiku

News1 day ago

Why Tinubu asked his Chatham House team members questions

News1 day ago

Tinubu claim he never lost any election

Troll (2022 film)
Movie Subtitle5 days ago

DOWNLOAD Complete Troll (2022 film) Subtitles File [English SRT] 2022

My Name Is Vendetta (2022 film)
Movie Subtitle5 days ago

DOWNLOAD Complete My Name Is Vendetta (2022 film) Subtitles File [English SRT] 2022

DOWNLOAD Complete Wednesday (TV series) (2022 film) Season 1 Subtitles File [English SRT] 2022
Movie Subtitle1 day ago

DOWNLOAD Complete Wednesday (TV series) (2022 film) Season 1 Subtitles File [English SRT] 2022

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Complete Episodes)

Sven-Goran Eriksson
Sports6 days ago

Who Manchester United should sign instead of Cody Gakpo – Sven-Goran Eriksson

Blood & Water (South African TV series)
Movie Subtitle5 days ago

DOWNLOAD Complete Blood & Water (TV series) (2022 film) Season 3 Subtitles File [English SRT] 2022

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 01)

Aunty Success
Celebrity6 days ago

Top 5 Richest Kid Nigerian Skit Makers And How Their Networth

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 02)

TIMISIRE THE GOLDEN GIRL by Opeyemi Akintunde _ ANE Story
ANE Stories6 days ago

[STORY] TIMISIRE THE GOLDEN GIRL (Episode 20)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 03)

Behind The Fine Face by Moshood Avidiime - ANE Story
ANE Stories6 days ago

[STORY] BEHIND THE FINE FACE (Episode 05)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 06)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 07)

TIMISIRE THE GOLDEN GIRL by Opeyemi Akintunde _ ANE Story
ANE Stories2 days ago

[STORY] TIMISIRE THE GOLDEN GIRL (Episode 22)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Final Episode 31)

Behind The Fine Face by Moshood Avidiime - ANE Story
ANE Stories5 days ago

[STORY] BEHIND THE FINE FACE (Episode 07)

News5 days ago

Buhari Appoints Hairdresser As Boss Of Financial Institution – Lawyers Demand Sack

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 11)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 14)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 04)

TIMISIRE THE GOLDEN GIRL by Opeyemi Akintunde _ ANE Story
ANE Stories5 days ago

[STORY] TIMISIRE THE GOLDEN GIRL (Episode 21)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 19)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 10)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 05)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 08)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 09)

DOWNLOAD Complete Wednesday (TV series) (2022 film) Season 1 Subtitles File [English SRT] 2022
Entertainment2 days ago

Will There Be Wednesday (Tv Series) Season 2, Release Date, Cast, Latest News

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 12)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 23)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 28)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 13)

QATAR 2022 FIFA World Cup changes you ought to know
Sports5 days ago

Qatar World Cup last 16 teams and the fixtures

Blood & Water (South African TV series)
Movie Subtitle5 days ago

DOWNLOAD Complete Blood & Water (TV series) (2020 film) Season 1 Subtitles File [English SRT] 2020

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 16)

Behind The Fine Face by Moshood Avidiime - ANE Story
ANE Stories2 days ago

[STORY] BEHIND THE FINE FACE (Episode 08)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 24)

Behind The Fine Face by Moshood Avidiime - ANE Story
ANE Stories5 days ago

[STORY] BEHIND THE FINE FACE (Episode 06)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 18)

DIARY OF A PASTOR’S SON by Frank The Writer - AllNaijaEntertainment
ANE Stories5 days ago

[STORY] DIARY OF A PASTOR’S SON (Episode 30)

ANE Billboard Hots