Any version below 8.2.3 - including 8.2.2p7 which was a bug fix - is
vulnerable to buffer overflow.
BIND 8 is old legacy code and even 8.2.3 is based on this.
BIND 9 is a rewrite, but may need some changes in your config.
I'm running 9.1 quite well.
On Fri, Feb 02, 2001 at 04:33:37PM +0800, Juan Miguel Cacho wrote:
> I don't know how old this news is but I just read it in today's (2 Feb 2001)
> issue of Philippine Star, page 28, Business section - NetWorks:
>
> "According to CERT, software called Berkeley Internet Name Domain (BIND)
> allows hackers to enter the internet undetected through the networks'
> address system in a number of ways. Once inside the system, these hackers
> can then issue commands which can shut down major portions of the internet."
>
> What versions are they talking about? Does this "issue" include version 9?
--
http://www.internet.org.ph The Philippine Internet Resource
Mobile Voice/Messaging: +63-917-810-9728
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
