CENIC DNS Status Summary as of 08-07-08

Email: noc@cenic.org • Phone: (714) 220-3494

Regarding the DNS issues released by CERT as CERT VU#800113 and by the ISC as BIND Vulnerabilites, released on 7-8-2008 and discovered by Dan Kaminsky.

CENIC has been aware of this issue from the outset and by the evening of 7-8-2008 has taken all applicable community recommended steps to mitigate any potential DNS Cache Poisoning attacks. At this time CENIC believes our nameservers to be affirmatively protected from this particular attack vector, and maintained in accordance with current Internet-wide best practices.

Further information regarding these specific vulnerabilites can be found at:

• CERT VU#800113
• Internet Systems Consortium (ISC)
• Dan Kaminsky's personal site