2000414

	DNS spoof attempt
advICE :Intrusions : 2000414

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
An attacker has attempted to redirect trsffic to another site.
Details
However, this report may also occur as the result of a poorly implemented DNS protocol, in which the same DNS id has been reused in two transactions within a 10 second interval. You should examine the address of the intruder; if it is a system unknown to you, it may indicate a DNS spoof attempt.

more information

BugtraqID: 80 ISC BIND named SIGINT and SIGIOT symlink Vulnerability
BugtraqID: 134 Multiple Vendor BIND iquery buffer overflow Vulnerability
BugtraqID: 136 Multiple Vendor BIND iquery buffer overflow Vulnerability
BugtraqID: 678 Multiple Vendor BIND Cache Poisoning Vulnerability
BugtraqID: 788 Multiple Vendor BIND (NXT Overflow & Denial of Service) Vulnerabilities
CERT: CA-97.22.bind
DNS: More about the DNS service.

 
Version appeared: