BIND serious remote vulnerabilities - Secunia Advisories - Vulnerability Information

Vulnerability Information

Vulnerability Scanning

Community

Blog - new entry!

Corporate Information

Home > Vulnerability Information > Secunia Advisories > BIND serious remote vulnerabilities

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

BIND serious remote vulnerabilities

Secunia Advisory:

SA7494

Advisory Toolbox:

Issue ticket

Save in to-do list

Mark as handled

Exploit information

Download as PDF

Review actions

Add comment

Release Date:

2002-11-12

Last Update:

2003-09-09

Popularity:

9,901 views

Critical:

Highly critical

Impact:

System access

Where:

From remote

Solution Status:

Partial Fix

Software:

ISC BIND 4.x.x
ISC BIND 8.x.x

Secunia CVSS-2 Score:

Available in Secunia business solutions

Subscribe:

Instant alerts on relevant vulnerabilities

Advisory Content (Page 2 of 3)

[ 1 ] [ 2 ] [ 3 ]

Secunia is hiring, read about the open positions here!

Solution:
Currently, only RedHat has issued an update but other vendors should follow shortly.

The best temporary solution is to disable recursion on your name servers. This can be done by doing the following:
For BIND 8 change / add to named.conf:
options {
recursion no;
};
For BIND 4 change / add to named.boot
options no-recursion

Also ANY DNS server ought to run in a chroot'ed jail. This will in most cases limit the impact of a compromise.

BIND 9 is NOT vulnerable. BIND 9 may be an easy option for users of BIND 8 and an upgrade from BIND 4 isn't too difficult either. ISC recommends that you deploy BIND version 9.2.1, see more:
http://www.isc.org/products/BIND/bind-security.html

EVEN IF YOU UPGRADE TO BIND 9.2.1, YOU SHOULD STILL DEPLOY A VENDOR UPDATE AS SOME RESOLVER LIBRARIES MAY NOT BE UPDATED.

Secunia will issue advisories regarding each individual system as more detailed information becomes available.

Some patches are now available from ISC.

BIND 8.3.3:
http://www.isc.org/products/BIND/patches/bind833.diff

BIND 8.2.6:
http://www.isc.org/products/BIND/patches/bind826.diff

BIND 4.9.10:
http://www.isc.org/products/BIND/patches/bind4910.diff

Red Hat has issued updated packages:
http://rhn.redhat.com/errata/RHSA-2002-133.html
http://rhn.redhat.com/errata/RHSA-2002-119.html

Provided and/or discovered by:
Internet Security Systems, iss.net

Changelog:
14/11/2002 ISC has issued official patches to BIND 4 and 8

Original Advisory:
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469

Other References:
http://www.isc.org/products/BIND/bind-security.html

Change Page:
[ 1 ] [ 2 ] [ 3 ]

Track this Secunia Advisory

Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory

Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

17th Dec, 2009

New advisories:	32
New vulnerabilities:	77
Updated advisories:	44

Less // 157 views

EEGShop "id" SQL Injection Vulnerability

Moderately // 157 views

iSupport Multiple Vulnerabilities

Moderately // 457 views

PHP Multiple Vulnerabilities

Less // 308 views

Cisco ASA WebVPN Bookmark URLs Security Bypass

Less // 205 views

Mojo iWMS "ERRMSG" Cross-Site Scripting Vulnerability

Less // 192 views

Trango Access5830 Subscriber Unit Synchronization Vulnerability

Moderately // 261 views

IBM Rational ClearQuest CQWeb Information Disclosure Vulnerability

Less // 220 views

eUploader Pro Cross-Site Request Forgery

Less // 224 views

Centreon Improper Authentication Security Bypass

Less // 219 views

Recipe Script Cross-Site Scripting and Request Forgery

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.