BIND 8.2.2.-P3, 0-day exploit

[patrick () PINE NL (Patrick Oonk)]

Hi,

I hear many people about being rooted with a hole
in BIND 8.2.2-P3 (most of them Linux boxes)

The ISC page states this:

'ISC's BIND 8.2.2-P5 was released on
November 12. It includes many new
features, including the security
updates from 8.2.2-P3. If you are
running a version of BIND prior to
8.2.2-P3, we strongly recommend
upgrading to correct the known
security problems. '

In other words, P3 should be safe.

So what is going on ? Is there some
0-day exploit doing rounds?

        p.

--
 Patrick Oonk -  PO1-6BONE -  patrick () pine nl -  www.pine.nl/~patrick
 Pine Internet - PAT31337-RIPE - PGP keyID BE7497F1 - XOIP 0208723350
 Tel: +31-70-3111010  -   Fax: +31-70-3111011   -  http://security.nl
 PGP   fingerprint   A6 12 66 7F 22 84 1B E5  73 8C 99 F7 17 7B A3 98
 Excuse of the day: The POP server is out of Coke