Apple finally fixes DNS bug

With today’s release of Security Update 2008-006 Apple has finally addressed this summer’s DNS bug. In their previous update they fixed BIND, but that only affects people running servers. Now, they’ve updated mDNSResponder. Clients are no longer susceptible to DNS cache poisoning attacks thanks to the inclusion of source port randomization.

The Security Update addresses some other interesting bugs. Time Machine was saving sensitive logs without using the proper permissions, so any user could view them.

[photo: edans]

Comments [4]

tagged: apple, bind, bug, Dan Kaminsky, dns, DNS cache poisoning, iphone, mdnsresponder, security update, time machine

Reader Comments

*golf claps*

Posted at 2:58 pm on Sep 15th, 2008 by psychcf

Clients are less susceptible to DNS cache poisoning with source port randomization, but not completely immune.

Posted at 4:13 pm on Sep 15th, 2008 by Steve Shockley

Because it’s on the iPhone it must be important!

Grow up, get a phone that works.

Posted at 4:43 pm on Sep 15th, 2008 by cow

Def some good info here – keep it coming

Posted at 4:53 pm on Sep 1st, 2009 by Private Label Rights

Apple finally fixes DNS bug

Recent Posts

Reader Comments

Leave a Reply

Hacks

Resources

RSS newsfeeds

Most commented on (30 days)

Recent comments