Ozbiljna rupa u BIND-u 4 & 8 (buffer overrun)

Security researchers have discovered several serious new vulnerabilities in the BIND software that runs on the vast majority of the Internet's DNS servers. The most serious flaw, a buffer overrun in both BIND 4 and BIND 8, enables an attacker to execute arbitrary code on a vulnerable server.

http://www.eweek.com/article2/0,3959,696200,00.asp

Trenutna stabilna verzija istog je 9.2.1

Potpis

With a PC, I always felt limited
by the software available.
On Unix, I am limited only by my knowledge.

--Peter J. Schoenster

Netacno... (u vezi borg-ovog posta za bind 9.2.1)


BIND 9 Release Candidate
BIND Version 9.2.2rc1 (Released August 14, 2002)
BIND 9.2.2rc1 is a release candidate for BIND 9.2.2. It fixes a number of bugs in 9.2.1.

Sorry ... sa isc.org sam i citao ...
Samo sam izgleda zurio pa nisam ni obracao paznju ...

Potpis

With a PC, I always felt limited
by the software available.
On Unix, I am limited only by my knowledge.

--Peter J. Schoenster

opusteno... bind suxx big time nazalost.. :(

ja zaboravih, temp (a mozda i perm) resenje je da disable-ujete recursive query... (naravno podesite ispravne ip adrese. Zacinite po ukusu uz neki log channel ....


// Specifies which hosts are allowed to make recursive queries
// through this server. If not specified, the default is to allow recursive
// queries from all hosts.
//
allow-recursion {
10.1.0.0/24;
10.2.0.0/24;
};