| |||||||||||||
|
| |||||||||||||
BIND 9 denial of service being actively exploitedBIND 9 denial of service being actively exploitedPosted Jul 29, 2009 22:32 UTC (Wed) by jond (subscriber, #37669)In reply to: BIND 9 denial of service being actively exploited by thyrsus Parent article: BIND 9 denial of service being actively exploited
I believe you are still vulnerable. The wording of the Debian security advisory included:
"This vulnerability affects all BIND servers which serve at least one DNS zone authoritatively, as a master, even if dynamic updates are not enabled. The default Debian configuration for resolvers includes several authoritative zones, too, so resolvers are also affected by this issue unless these zones have been removed."
the authoritative zones in the Debian package include the localhost zone and some broadcast ones (255,0).
(Log in to post comments)
|
|
||||||||||||