Description

HP has issued an update for bind. This fixes a vulnerability, which can be exploited by malicious people to poison the DNS cache.

For more information:
SA30973

The vulnerability is reported in HP-UX B.11.11, B.11.23, and B.11.31 running BIND v9.3.2 or BIND v9.2.0, and HP-UX B.11.11 running BIND v8.1.2

Solution
Apply patches. Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf and check your firewall settings. See vendor advisory for more details.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
HPSBUX02351 SSRT080058:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01506861

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area