|
midrange.com
Our ISS scanning software tells us the same thing, but we're limited to the
current OS/400 provided BIND version. Wonder if PTFs address these types
of concerns?
rob@xxxxxxxxx
Sent by:
midrange-l-bounce To
s@xxxxxxxxxxxx Midrange Systems Technical
Discussion
<midrange-l@xxxxxxxxxxxx>
07/19/2005 12:53 cc
PM
Subject
Re: Migrate i5 DNS to BIND 8
Please respond to
Midrange Systems
Technical
Discussion
<midrange-l@midra
nge.com>
The real hoot is that we contracted with IBM to do "benevolent hacking" on
our network. And one of our dns servers is running bind 8. IBM's
recommendation was to upgrade our DNS server. So I opened a pmr, and then
a DCR to get an upgrade to the bind level. IBM's reply to both requests
was basically to go get bent and the upgrade wasn't needed.
Hello, left hand, meet right hand...
IBM's exact wording from the benevolent hacking team:
BIND is vulnerable to a buffer overflow.
Multiple SIG resource records sent from an attacker controlled DNS
server could crash the server or execute arbitrary code. This
would enable attackers to gain control of the system.
For more information, please see Remote Execution of Code in BIND
Affected hosts:
(deleted from this email)
Recommendation:
BIND 8.3.4 has been released. Always upgrade to the latest
version. Consider upgrading to BIND 9 or later. A workaround is
available through disabling recursion (see references).
Contact ISC for patch information.
Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
Ryan <whiterabbit1@xxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
07/19/2005 11:37 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
To
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
cc
Subject
Re: Migrate i5 DNS to BIND 8
On 7/18/05, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:
> The i5 is our DNS server. It's running the old BIND 4 version and I
want to
> migrate to the BIND 8 version.
Bind 8 is older than the hills. Does IBM patch all the holes in it.
I believe the world uses 9.2.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.
_____________________________________________________________________________
Scanned by IBM Email Security Management Services powered by MessageLabs.
For more information please visit http://www.ers.ibm.com
_____________________________________________________________________________
ForwardSourceID:NT000265AA
_____________________________________________________________________________
Scanned by IBM Email Security Management Services powered by MessageLabs. For
more information please visit http://www.ers.ibm.com
_____________________________________________________________________________
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
