|
|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2006:207: bind Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the bind package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2006:207 (bind).
The BIND DNS server is vulnerable to the recently-discovered OpenSSL
RSA signature verification problem (CVE-2006-4339). BIND uses RSA
cryptography as part of its DNSSEC implementation. As a result, to
resolve the security issue, these packages need to be upgraded and for
both KEY and DNSKEY record types, new RSASHA1 and RSAMD5 keys need to
be generated using the '-e' option of dnssec-keygen, if the current
keys were generated using the default exponent of 3.
You are able to acertain if your keys are vulnerable by looking at the
algorithm (1 or 5) and the first three characters of the Base64 encoded
RSA key. RSAMD5 (1) and RSASHA1 (5) keys that start with 'AQM', 'AQN',
'AQO', or 'AQP' are vulnerable.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:207
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
