DNS Cache Poisoning (2)

Evil

x.y.z.w

DNS

good

DNS

evil

DNS

bank

(1) any.evil.com ?

(2) any.evil.com ?

(3) store Query ID#

(4) www.bank.com ?

(5) www.bank.com ?

(6) spoof answer:

www.bank.com=x.y.z.w

(7) Cache:

www.bank.com

= x.y.z.w

Good

(8) www.bank.com ?

(9) x.y.z.w

(10) bank transaction

Www

bank

Previous slide

Next slide

Back to first slide

View graphic version