Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 1 May 1998 13:56:05 -0700 (PDT)
From:      michael@blueneptune.com
To:        freebsd-isp@FreeBSD.ORG
Cc:        mmoran@veronet.net, batie@agora.rdrop.com
Subject:   Re: Named disappeared
Message-ID:  <199805012056.NAA25939@rainey.blueneptune.com>
In-Reply-To: <19980501112652.32131@agora.rdrop.com> from "Alan Batie" at May 1, 98 11:26:52 am

next in thread | previous in thread | raw e-mail | index | archive | help

There was a CERT advisory on April 8th that dealt with vulnerabilities
in the BIND (named) distribution.  This included situations that could
result in an outside individual causing named to crash.  (Or worse yet,
gain root access to your system.)  The advisory is here:

    http://www.cert.org/advisories/CA-98.05.bind_problems.html

If you are seeing crashes, it may very well be somebody trying
to exploit these problems on your server.

Anybody using BIND should read this advisory, and upgrade to either
BIND 4.9.7 or BIND 8.1.2.  All previous versions under FreeBSD are
vulnerable to at least some portion of the reported problems.  You
can download either version from this page:

    http://www.isc.org/new-bind.html

-- 
Michael Bryan
michael@blueneptune.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805012056.NAA25939>