|
|
Family: Debian Local Security Checks --> Category: infos
[DSA409] DSA-409-1 bind Vulnerability Scan
Vulnerability Scan Summary
DSA-409-1 bind
Detailed Explanation for this Vulnerability Test
A vulnerability was discovered in BIND, a domain name server, whereby
a malicious name server could return authoritative negative responses
with a large TTL (time-to-live) value, thereby rendering a domain name
unreachable. A successful attack would require that a vulnerable BIND
instance submit a query to a malicious nameserver.
The bind9 package is not affected by this vulnerability.
For the current stable distribution (woody) this problem has been
fixed in version 1:8.3.3-2.0woody2.
For the unstable distribution (sid) this problem has been fixed in
version 1:8.4.3-1.
We recommend that you update your bind package.
Solution : http://www.debian.org/security/2004/dsa-409
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
