Re: named exploit

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Thu, 24 Jul 2008 06:03:54 -0600 (MDT)
Rick Kelly <rmk%toad.rmkhome.com@localhost> wrote:

> 
> Looks like a named exploit is out in the wild now.
> 
> http://www.caughq.org/exploits/CAU-EX-2008-0002.txt
> 
Yes.  Until the fixes are fully in our tree, I suggest running bind9 or
bind95 from pkgsrc.  (And make sure you disable any query-source lines
in your named.conf.)


                --Steve Bellovin, http://www.cs.columbia.edu/~smb