Re: named exploit

[Geert Hendrickx <ghen%telenet.be@localhost>]

On Thu, Jul 24, 2008 at 08:17:27AM -0400, Steven M. Bellovin wrote:
> On Thu, 24 Jul 2008 06:03:54 -0600 (MDT)
> Rick Kelly <rmk%toad.rmkhome.com@localhost> wrote:
> 
> > 
> > Looks like a named exploit is out in the wild now.
> > 
> > http://www.caughq.org/exploits/CAU-EX-2008-0002.txt
> > 
> Yes.  Until the fixes are fully in our tree, I suggest running bind9 or
> bind95 from pkgsrc.  (And make sure you disable any query-source lines
> in your named.conf.)


HEAD, netbsd-4 and netbsd-4-0 have the fix already.  netbsd-3* will follow
shortly.


        Geert