[NCLUG] Script Kiddies - BIND 8.2.2 exploit

John L. Bass jbass at dmsd.com
Mon Feb 19 14:35:04 MST 2001


Hi Guys,

For those that haven't closed the BIND/named 8.2.2 exploit yet, better get with
it. The script kiddies hit 3 of the machines on the CWX network this last week.

Upgrading to 8.2.3 bits is one fix, blocking access with ipchains another, or
for machines not externally serving zone/DNS entries, using the listen-on option
for your local lan subnet. 

John



More information about the NCLUG mailing list