[SECURITY] New version of bind released

The version bind that was distributed in Debian GNU/Linux 2.1 has a vulnerability in the processing of NXT records that can be used by an attacked in a Debian of Service attack or theoretically be exploited to gain access to the server. This has been fixed in version 8.2.5p5-0slink1, and we...

CVE-1999-0833

Buffer overflow in BIND 8.2 via NXT records...

CVE-1999-0835

Denial of service in BIND named via malformed SIG records...

CVE-1999-0024

DNS cache poisoning via BIND, by predictable query IDs...

CVE-1999-0184

When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records...

CVE-1999-0011

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer...

altavista.firewall97.txt

Date: Thu, 25 Feb 1999 12:57:20 +0100 From: Jochen Thomas Bauer To: [email protected] Subject: AltaVista Firewall97 Hello everyone, Before I begin I want to make one thing clear: I told AltaVista about this problem about 4 weeks ago. The next day I got a reply saying that my message had been...

ISC BIND 4.9.7 -T1B - named SIGINT / SIGIOT Symlink

source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in the system. The named daemons will append named...

CVE-1999-0009

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases...

ISC BIND (Multiple OSes) - Remote Buffer Overflow (2)

ISC BIND Multiple OSes - Remote Buffer Overflow 2 / source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when...

ISC BIND (Multiple OSes) - Remote Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy,...

ISC BIND (Linux/BSD) - Remote Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy,...

CVE-1999-0024

DNS cache poisoning via BIND, by predictable query IDs...

PT-2009-6689

Name of the Vulnerable Software and Affected Versions ISC BIND versions prior to 9.4.3-P3 ISC BIND versions prior to 9.5.1-P3 ISC BIND versions prior to 9.6.1-P1 liblwres40 affected versions not specified libisccfg40 affected versions not specified libisc45 affected versions not specified...