Security Incidents mailing list archives

Re: DNS server crashed


From: Michael Boman <michael () ELINUX COM SG>
Date: Wed, 7 Feb 2001 09:36:39 +0800

Jason Lewis wrote:

Anyone aware of exploits for the recent BIND security holes?  I had a name
server crash today.  Nothing in the logs that point to anything, it was just
down.  It is the only box I can't upgrade BIND on.  It has a funky OS
install and I need to rebuild it from scratch.  I am waiting for new boxes,
so it is low priority.

I suspect someone was attempting to hack it, but I can't find any evidence.
It was just hung.

Thoughts?

jas
http://www.rivalpath.com

Several people on the BUGTRAQ mailinglist has reported that Bind 9.1 is
crashing if someone do a

"nmap -O -sT proven"

on the server. Nothing official from ISC.org or CERT has been announced
since the last bug report for Bind 8.2.2-P7 was filed.

Best regards
 Michael Boman

--
"eLINUX  ---  Enabling the Net Economy on Linux"
----------------------------------------------------------
Michael Boman                   eLinux Pte Ltd
Technical Consultant            http://www.elinux.com.sg
michael () elinux com sg           Tel:    (65)  227 6180
                                Fax:    (65)  227 5808
----------------------------------------------------------

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Current thread: