From charvel@localhost.link.pl Tue Nov 23 13:41:36 1999
From:	Piotr Majka <charvel@localhost.link.pl>
Subject: Re: BIND version 8.2.2 root compromise
Date:	22 Nov 1999 18:32:40 GMT
References: <moderated-by-marcinw-943287364@pl.comp.security>
Reply-To: charvel@linux.pl
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: 8bit
X-Orcpt: rfc822;moderator@iko.zakopane.top.pl
Newsgroups: pl.comp.security
Message-ID: <moderated-by-marcinw-943347764@pl.comp.security>
Path: spawn!polsl.gliwice.pl!news.onet.pl!news.nowytarg.top.pl!news.zakopane.top.pl!moderators!marcinw.and.underley
Approved: marcinw@medianet.pl
X-Moder-Tool: modArc
Lines: 39
Xref: spawn pl.comp.security:16114


Piotr Wanat <Piotr.Wanat@comarch.pl> napisał(a):

> 	Za dzisiejszymi serwisami :)

> BIND 8.2.2-P3 has been released in order to address vulnerabilities
[cut]

Ekhm, refleksem to się nie popisałeś ;P
A jak już bind w temacie to: P3 i P5 mają źle napisaną funkcje w
komendzie host

w P3: host -t any domain 
nie pokazuje rekordu soa (poprawiono w P4)
w P5: host domain
nie pokazuje rekordów mx 

Patch poniżej

--- host.c.orig Mon Nov 22 19:27:10 1999
+++ host.c      Mon Nov 22 19:29:22 1999
@@ -270,11 +270,6 @@
                        /*NOTREACHED*/
                }
        }
-       if (gettype == 0) {
-               if (verbose)
-                       printf ("Forcing `-t a' for signature trace.\n");
-               gettype = ns_t_a;
-       }
        argc -= optind;
        argv += optind;
        if (argc < 1)


-- 
Piotr "Charvel" Majka | PGP Public Key: finger charvel@link.pl | Uin: 20873695
GCM d- s-:- a-- C++ UL++++ P+ L+++ E--- W+ N+++ !o !K w--- !O M V- PS+ PE !Y 
PGP+ t--- !5 X R tv- b !DI D+ G++ e h r y++**