Top company websites are hackers' dream

250 multinational corporates could lose their .coms because of wacky DNS protection

Written by James Middleton, vnunet.com

Advertisement

Almost 80 per cent of .com websites could be compromised by hackers, according to research by DNS software developer Men & Mice.

Ongoing research has found that a quarter of Fortune 1000 companies were running servers with vulnerable DNS setups. This means that around 250 multinational corporates are at risk of losing their websites.

And it's not just hackers or worms that are the worry: there is no protection from natural outages either. If the single network segment housing their DNS servers fails, the site goes down.

Despite high profile attacks followed by higher profile warnings and advisories about configuration and flaws in the Bind software, a majority of websites still suffer from DNS bugbears.

Worryingly, the results of the latest Domain Health Survey, from August, shows that 78.96 per cent of 5000 randomly selected internet zones have incorrect setups.

Men & Mice found that a majority of errors were caused by administrators misconfiguring DNS zone setups, causing "lame delegations".

Despite leaving security holes in the system, lame delegations can cause potentially serious problems for web visitors and for delivery of mail.

If only one of the servers to which the zone is delegated has authoritative data for the zone, then if that server should become unavailable, the zone is effectively not locatable from the net. It doesn't matter if there are other servers that have authoritative data for the zone, because they are not listed in the delegation.

The report noted that although 36.16 per cent of zones block zone transfer, "this has no effect on the security of the zone data itself, and only provides security by obscurity," said Men & Mice.

A high number of vulnerable sites are also those guilty of not applying patches to fix the serious vulnerabilities found in Bind software back in January.

Men & Mice said these unpatched servers could "allow hackers to steal credit card numbers, hijack websites or redirect email traffic."

You can see the full reports here.

Tags:

Related whitepapers

Related jobs

Do you agree?

Most commented stories

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

05 Sep 2008

8.64 MBPodcast Special: Views from the Valley More...

Podcast image

04 Sep 2008

12.7 MBComputing podcast 4 September 2008 More...

Podcast logo

02 Sep 2008

8.39 MBEco-Entrepreneur Podcast: Bulldog More...

Poll

INTERNET EXPLORER 8

INTERNET EXPLORER 8

Are you intending to download Internet Explorer 8 when it becomes available?

Previous poll results

Spotlight

LogMeIn Rescue+Mobile

BlackBerry gets LogMeIn remote support

Rescue+Mobile lets a support technician take control of the handset   More...

Dell manufacturing plant

Dell planning factory closures to cut costs

Report claims that PC maker is looking to sell off...  More...

Google Chrome

More growing pains for Chrome

Google wrestles with licensing and security problems   More...

Smartphone

US takes 3G crown from Europe

Americans finally catch up with Europeans in adoption of 3G   More...

Primary Navigation