Upgrade your DNS: BIND 9 DNS Vulnerability / DDoS Attack - GoFuckYourself.com

CYF · 07-28-2009, 09:39 PM

There's a new exploit for BIND 9 that will allow a remote attacker to shut down your DNS servers.

The exploit is in the wild, all versions are affected.

There is a patch / upgrade available.

Text from www.isc.org:

Redwood City, California -- July 28, 2009 -- ISC has published new releases of all current versions BIND 9 in response to CERT Vulnerability Note VU#725188. See this ISC Security Advisory for details and instructions for downloading these releases.

An exploit of this vulnerability was made public at the same time the vulnerability was announced, which makes it especially important to upgrade.

Receipt of a specially-crafted dynamic update message may cause BIND 9 servers to exit. This vulnerability affects all servers ? it is not limited to those that are configured to allow dynamic updates. Access controls will not provide an effective workaround.

Some sites may have firewalls that can be configured with packet filtering techniques to prevent nsupdate messages from reaching their nameservers.

CYF · 07-28-2009, 09:41 PM

For the technical details see here:

https://www.isc.org/node/474

Urgent: this exploit is public. Please upgrade immediately.

Barefootsies · 07-28-2009, 09:45 PM

bump for the urgency!

CYF · 07-28-2009, 09:58 PM

Quote:

Originally Posted by Barefootsies

bump for the urgency!

This is pretty serious, the exploit code is 25 lines of perl code. It's out in the wild.

OrangeContent · 07-28-2009, 10:04 PM

That's no fun at all.

CYF · 07-28-2009, 10:33 PM

Quote:

Originally Posted by OrangeContent

That's no fun at all.

No, it's not very fun. Bind is a very popular DNS server and this allows anyone on the internet to kill your dns server.

CYF · 07-29-2009, 03:26 PM

bmping some important into

alias · 07-29-2009, 03:27 PM

Tinydns?

07-28-2009, 09:39 PM	#1
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	Upgrade your DNS: BIND 9 DNS Vulnerability / DDoS Attack There's a new exploit for BIND 9 that will allow a remote attacker to shut down your DNS servers. The exploit is in the wild, all versions are affected. There is a patch / upgrade available. Text from www.isc.org: Redwood City, California -- July 28, 2009 -- ISC has published new releases of all current versions BIND 9 in response to CERT Vulnerability Note VU#725188. See this ISC Security Advisory for details and instructions for downloading these releases. An exploit of this vulnerability was made public at the same time the vulnerability was announced, which makes it especially important to upgrade. Receipt of a specially-crafted dynamic update message may cause BIND 9 servers to exit. This vulnerability affects all servers ? it is not limited to those that are configured to allow dynamic updates. Access controls will not provide an effective workaround. Some sites may have firewalls that can be configured with packet filtering techniques to prevent nsupdate messages from reaching their nameservers. __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons

07-28-2009, 09:41 PM	#2
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	For the technical details see here: https://www.isc.org/node/474 Urgent: this exploit is public. Please upgrade immediately. __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons

07-28-2009, 09:45 PM	#3
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	bump for the urgency! __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

07-28-2009, 10:04 PM	#5
OrangeContent Confirmed User Join Date: Mar 2009 Location: US / Canada Posts: 381	That's no fun at all. __________________ START A REVIEW SITE GOOD PRICES ON WRITTEN REVIEWS CLICK HERE quote (at) orangecontent.com \| ICQ: 564-113-756

07-29-2009, 03:27 PM	#8
alias aliasx Join Date: Apr 2001 Posts: 19,010	Tinydns? __________________ https://porncorporation.com

07-29-2009, 03:26 PM	#7
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	bmping some important into __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons