Dan Kaminsky DNS Problem -> Citrix auch betroffen
Das von Dan Kaminsky identifizierte DNS Problem macht nun die zweite Runde, indem jeder DNS Query Dienst analysiert wird. Citrix Access Gateway ist so ein Dienst, der die Source DNS Ports nicht randomisiert.
=============== INFO =============
Citrix has acknowledged a vulnerability in Access Gateway, which can be exploited by malicious people to poison the DNS cache.
The vulnerability is caused due to Access Gateway not sufficiently randomising the DNS query port number, which can be exploited to poison the DNS cache.
The vulnerability is reported in all versions of the Access Gateway Standard and Advanced Edition appliance firmware up to and including v 4.5.7 Rev A.
http://secunia.com/advisories/31594/
=============== INFO =============
Citrix has acknowledged a vulnerability in Access Gateway, which can be exploited by malicious people to poison the DNS cache.
The vulnerability is caused due to Access Gateway not sufficiently randomising the DNS query port number, which can be exploited to poison the DNS cache.
The vulnerability is reported in all versions of the Access Gateway Standard and Advanced Edition appliance firmware up to and including v 4.5.7 Rev A.
http://secunia.com/advisories/31594/