From owner-freebsd-security Mon Jun 1 13:25:47 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA25135 for freebsd-security-outgoing; Mon, 1 Jun 1998 13:25:47 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from gw.sut.ru (gw.sut.ru [194.190.126.49]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id NAA24955 for ; Mon, 1 Jun 1998 13:24:22 -0700 (PDT) (envelope-from uwl@lanck.ru) Received: from lanck.ru (lanck.ru [194.226.196.66]) by gw.sut.ru (8.6.12/8.6.12) with ESMTP id AAA20912 for ; Tue, 2 Jun 1998 00:38:08 +0400 Received: by lanck.ru with UUCP id AAA11842; (8.8.5/vak/1.9) Tue, 2 Jun 1998 00:19:07 +0400 (MSD) Received: (from uwl@localhost) by koala.lanck.ru (8.8.8/8.8.8) id WAA15303; Mon, 1 Jun 1998 22:16:23 +0400 (MSD) (envelope-from uwl) Message-ID: <19980601221622.06118@lanck.ru> Date: Mon, 1 Jun 1998 22:16:22 +0400 From: Vladimir Uralsky To: freebsd-security@FreeBSD.ORG Subject: Re: /usr/sbin/named References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89i In-Reply-To: ; from Steve Reid on Sun, May 31, 1998 at 11:56:23PM -0700 X-Operating-System: FreeBSD 3.0-980426-SNAP i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, May 31, 1998 at 11:56:23PM -0700, Steve Reid wrote: > Is /usr/sbin/named as distributed with FreeBSD 2.2.6-RELEASE vulnerable > to known exploits? > > Strings shows the version as 4.9.6-REL and a recent Bugtraq post listed > this version as exploitable. However, although the _version_ is the same > between my 2.2.6-RELEASE and 2.2.5-RELEASE machines, the _dates_ are > different. Is /usr/sbin/named in 2.2.6-RELEASE fixed? Today's stable contain a 4.9.7 but without compat directory, I had only a few time to see it and don't understand is it a bug in source directory tree or in my arms ;-) -- Vova. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message