Re: named exploit

[Geert Hendrickx <ghen%telenet.be@localhost>]

On Thu, Jul 24, 2008 at 07:03:50PM +0200, Geert Hendrickx wrote:
> On Thu, Jul 24, 2008 at 08:17:27AM -0400, Steven M. Bellovin wrote:
> > On Thu, 24 Jul 2008 06:03:54 -0600 (MDT)
> > Rick Kelly <rmk%toad.rmkhome.com@localhost> wrote:
> > 
> > > 
> > > Looks like a named exploit is out in the wild now.
> > > 
> > > http://www.caughq.org/exploits/CAU-EX-2008-0002.txt
> > > 
> > Yes.  Until the fixes are fully in our tree, I suggest running bind9 or
> > bind95 from pkgsrc.  (And make sure you disable any query-source lines
> > in your named.conf.)
> 
> 
> HEAD, netbsd-4 and netbsd-4-0 have the fix already.  netbsd-3* will follow
> shortly.
> 


NetBSD 3.* has been updated too, now.

        Geert