Guidance on how to secure home and small business routers, and critical vulnerabilities in BIND
It is henceforth obvious that, Home and Small Business routers excite criminals, government agencies and attackers seeking to gain control over a user's gateway to the Internet. Router misconfigurations (e.g., default credentials, interfaces open to the Internet) or the lack of security precautions (e.g., absence of updates) may make users susceptible to exploitation.
In fact, once an attacker
gains unauthorized access to a vulnerable router, they may be able to obtain
sensitive information from a user's computer or perform other attacks. Therefore,
Connectikpeople.co encourages users and administrators to review Security Tip ST15-002 for guidance on how to secure home and small
business routers.
US-CERT also encourages users
and administrators to review CERT/CC Router
Vulnerability Notes for information on recently found vulnerabilities in some routers.
At the end, ISC has released security updates to address
vulnerabilities in BIND. Exploitation of these vulnerabilities may allow a
remote attacker to cause a denial-of-service condition.
Available updates include:
- BIND 9 version 9.9.8-P2
- BIND 9 version 9.10.3-P2
- BIND 9 version 9.9.8-S3
Users and administrators are
encouraged to review ISC Knowledge Base Article AA-01317 and apply the necessary updates.
