mailing list archives
Fw: BIND 9.2.2 Vulnerabilities?
From: "HggdH" <hggdh () attbi com>
Date: Tue, 4 Mar 2003 15:15:11 -0600
fyi. Anyone knows anything about it?
----- Original Message -----
From: "John" <bugtraq () doomsday com>
To: <bugtraq () securityfocus com>
Sent: Tuesday, March 04, 2003 13:04
Subject: BIND 9.2.2 Vulnerabilities?
| The ISC website lists the following as of today:
| "ISC has discovered or has been notified of several bugs which can result
| in vulnerabilities of varying levels of severity in BIND as distributed by
| ISC. Upgrading to BIND version 9.2.2 is strongly recommended. If you
| cannot upgrade, BIND 8.3.4, 8.2.7, and 4.9.11 are available."
| 9.2.2 apparently was just released yesterday though I've seen no
| discussion about any specific vulnerabilities.
| The matrix at the bottom of the list shows two vulnerabilities, one with
| openssl, the other with libbind.
| Can anyone elaborate on what's happened here? I susbscribe to the BIND
| mailing list and haven't heard anything about this issue.
Full-Disclosure - We believe in it.
- Fw: BIND 9.2.2 Vulnerabilities? HggdH (Mar 04)