Security Incidents mailing list archives

Re: BIND 8.2.2.-P3, 0-day exploit


From: kj () INDIFFERENCE ORG (kj)
Date: Mon, 24 Apr 2000 16:57:44 -0700


On Sat, Apr 22, 2000 at 12:58:15PM +0200, Patrick Oonk wrote:
Hi,

I hear many people about being rooted with a hole
in BIND 8.2.2-P3 (most of them Linux boxes)

So what is going on ? Is there some
0-day exploit doing rounds?

Actually, I think only BIND 8.2.2-p5 is safe (?).

And remember _don't_ run it as root and chroot it if you can.

K.J.

"Never argue with an idiot. He will take you down to his level, and beat
you with experience."


Current thread: