From owner-freebsd-security Wed Nov 10 18:23:10 1999 Delivered-To: freebsd-security@freebsd.org Received: from s01.arpa-canada.net (s01.arpa-canada.net [209.104.122.2]) by hub.freebsd.org (Postfix) with ESMTP id 5165414C8C for ; Wed, 10 Nov 1999 18:23:07 -0800 (PST) (envelope-from matt@BabCom.ORG) Received: by s01.arpa-canada.net (Postfix, from userid 1001) id 2461CB885; Wed, 10 Nov 1999 21:23:07 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by s01.arpa-canada.net (Postfix) with ESMTP id 1E509E; Wed, 10 Nov 1999 21:23:07 -0500 (EST) Date: Wed, 10 Nov 1999 21:23:07 -0500 (EST) From: matt X-Sender: matt@s01.arpa-canada.net To: Mike Tancsa Cc: Robert Watson , freebsd-security@FreeBSD.ORG Subject: Re: BIND NXT Bug Vulnerability In-Reply-To: <4.1.19991110202719.04c5ee30@granite.sentex.ca> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The ports tree currently has 8.2.1 though, I'm sure alot of people have resorted to using this, I have. Has the maintainer of this port been contacted yet? -matt On Wed, 10 Nov 1999, Mike Tancsa wrote: : At 08:25 PM 11/10/99 , Robert Watson wrote: : >3.3-RELEASE appears to use 8.1.2, which I believe is not vulnerable. My : >understanding is that this bug was introduced in 8.2.* of BIND. Please : >correct me if I am wrong. : : Actually, the initial posting to bugtraq only shows some of the picture. : There are in fact 6 bugs listed on the given URL, : : e.g. : : Name: "solinger bug" : Versions affected: 8.1, 8.1.1, 8.1.2, 8.2, 8.2 patchlevel 1, 8.2.1 : Severity: SERIOUS : Exploitable: Remotely : Type: Denial of service : : : ---Mike : ********************************************************************** : Mike Tancsa, Network Admin * mike@sentex.net : Sentex Communications Corp, * http://www.sentex.net/mike : Cambridge, Ontario * 01.519.651.3400 : Canada * : : : To Unsubscribe: send mail to majordomo@FreeBSD.org : with "unsubscribe freebsd-security" in the body of the message : -- "If the primates that we came from had known that someday politicians would come out of the...the gene pool, they'd a stayed up in the trees and written evolution off as a bad idea. Hell, I always thought the opposable thumb was overrated." -Sheridan, "A Distant Star" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message