Re: dns cache poisoning

V6R1 (i think) fixes the Bind 8 weakness,
but dns cache poisoning is more than that.
Cert still lists IBM as having said nothing in public to address this or even if it is an issue. Given that Cisco, MS, Sun and others are all labelled as "vulnerable", I worry about all the no comments...
Jim
----- Original Message ----- From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, July 10, 2008 1:22 PM
Subject: Re: dns cache poisoning

We've contracted with IBM to do some benevolent hacking. They were really
getting down on us because of that bind level. iSeries support was saying
it's a non problem. We told those two to duke it out. V6R1 fixes this. I
think this was covered in the archives. If not midrange-l try the
security400 archives.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Jim Franz" <franz400@xxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
07/09/2008 11:50 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
<MIDRANGE-L@xxxxxxxxxxxx>
cc

Subject
dns cache poisoning






Any indication the i has issues with the dns cache poisoning
vulnerability?
The Cert reference mentions Bind 8 which is where V5R3 was at and guess we
still are. IBM eserver listed as "unknown" as in no response (yet) from
vendor.
http://www.kb.cert.org/vuls/id/800113

Bind 8 specifically in this link:
http://www.kb.cert.org/vuls/id/927905

Jim Franz
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.