[ale] Silly browser strings

[Lightner, Jeff]

Interestingly there is a thread on the BIND user's mailing list about an exploit where expired domains get cached by bad guys and nothing you can do can eliminate these bad caches.   Since the traffic is coming to your server you're probably not a victim of these but it seems like a parallel kind of discussion.


From: bind-announce-bounces+jlightner=water.com at lists.isc.org On Behalf Of ISC Support Engineering Staff
Sent: Wednesday, February 08, 2012 9:03 PM
To: bind-announce at lists.isc.org
Subject: NOTICE: ISC Update to CVE-2012-1033 - Ghost domain names

After completing our analysis of the DNS exploit reported by Professor
Haixin Duan of Tsinghua University, ISC has determined that the behavior
he describes, while verifiable, is due to design issues in the DNS
protocol.

Please read the complete update here:
https://www.isc.org/software/bind/advisories/cve-2012-1033




_______________________________________________
bind-announce mailing list
bind-announce at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-announce

-----Original Message-----
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of mike at trausch.us
Sent: Friday, February 10, 2012 11:14 AM
To: ale at ale.org
Subject: Re: [ale] Silly browser strings

On 02/10/2012 11:12 AM, William Bagwell wrote:
> On Thursday 09 February 2012, Jay Lozier wrote:
>> > On 02/09/2012 11:29 AM, William Bagwell wrote:
>>> > > "Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)"
>> >
>> > Windows 98, when did M$ stop support for it? If it truly is Win98, I
>> > wonder how infested it is.
> One source said 2006, another 2007. My point was how unlikely it would be
> for 11 computers that old try to connect to a web site in a three minute
> period. One I would believe, not 11.

It would appear that the domain that you've acquired was probably
previously the host of a zombie system, or perhaps a zombie controller even.

I don't think I have seen more than 2 Windows 98 systems in the last
five years, personally.

        --- Mike

--
A man who reasons deliberately, manages it better after studying Logic
than he could before, if he is sincere about it and has common sense.
                                   --- Carveth Read, "Logic"





Athena(r), Created for the Cause(tm)
Making a Difference in the Fight Against Breast Cancer

---------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------