• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

ISC Bind 8 Transaction Signatures Buffer Overflow Vulnerability

Solution:
The ISC strongly recommends upgrading to BIND version 9.1.0. Links to download the upgrade and various vendor-supplied fixes are available.


ISC BIND 8.2

• Caldera ptf7705a.pkg.Z
  ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.16/ptf7705 a.pkg.Z


• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• IBM AIX multiple_bind_vulns_efix.tar.Z
  ftp://ftp.software.ibm.com/aix/efixes/security/multiple_bind_vulns_efi x.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.1

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p1

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p3

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p6

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz


• TurboLinux 6.0 bind-8.2.3-2.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-8.2.3-2.i386.rp m


• TurboLinux 6.0 bind-contrib-8.2.3-2.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-contrib-8.2.3-2 .i386.rpm


• TurboLinux 6.0 bind-devel-8.2.3-2.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-devel-8.2.3-2.i 386.rpm


• TurboLinux 6.0 bind-utils-8.2.3-2.i386.rpm
  ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-utils-8.2.3-2.i 386.rpm

ISC BIND 8.2.2 p2

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p5

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz


• Slackware 7.1 i386 bind.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-7.1/patches/packages/b ind.tgz


• Slackware current i386 bind.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slakware/n1/bi nd.tgz

ISC BIND 8.2.2 p7

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• Caldera eDesktop 2.4 bind-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-8.2.3-1.i386.rpm


• Caldera eDesktop 2.4 bind-doc-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-doc-8.2.3-1.i386.rpm


• Caldera eDesktop 2.4 bind-utils-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-utils-8.2.3-1.i386.rpm


• Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-8.2.3-1.i386.rpm


• Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-doc-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-doc-8.2.3-1.i386.rpm


• Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-utils-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-utils-8.2.3-1.i386.rpm


• Caldera OpenLinux 2.3 bind-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-8.2.3-1.i386.rpm


• Caldera OpenLinux 2.3 bind-doc-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-doc-8.2.3-1.i386.rpm


• Caldera OpenLinux 2.3 bind-utils-8.2.3-1.i386.rpm
  ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-utils-8.2.3-1.i386.rpm


• Debian 2.2 alpha bind-dev_8.2.3-0.potato.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/bind -dev_8.2.3-0.potato.1_alpha.deb


• Debian 2.2 alpha bind_8.2.3-0.potato.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/bind _8.2.3-0.potato.1_alpha.deb


• Debian 2.2 alpha dnsutils_8.2.3-0.potato.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/dnsu tils_8.2.3-0.potato.1_alpha.deb


• Debian 2.2 arm bind-dev_8.2.3-0.potato.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/bind-d ev_8.2.3-0.potato.1_arm.deb


• Debian 2.2 arm bind_8.2.3-0.potato.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/bind_8 .2.3-0.potato.1_arm.deb


• Debian 2.2 arm dnsutils_8.2.3-0.potato.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/dnsuti ls_8.2.3-0.potato.1_arm.deb


• Debian 2.2 i386 bind-dev_8.2.3-0.potato.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/bind- dev_8.2.3-0.potato.1_i386.deb


• Debian 2.2 i386 bind_8.2.3-0.potato.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/bind_ 8.2.3-0.potato.1_i386.deb


• Debian 2.2 i386 dnsutils_8.2.3-0.potato.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/dnsut ils_8.2.3-0.potato.1_i386.deb


• Debian 2.2 m68k bind-dev_8.2.3-0.potato.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/bind- dev_8.2.3-0.potato.1_m68k.deb


• Debian 2.2 m68k bind_8.2.3-0.potato.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/bind_ 8.2.3-0.potato.1_m68k.deb


• Debian 2.2 m68k dnsutils_8.2.3-0.potato.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/dnsut ils_8.2.3-0.potato.1_m68k.deb


• Debian 2.2 ppc bind-dev_8.2.3-0.potato.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/bi nd-dev_8.2.3-0.potato.1_powerpc.deb


• Debian 2.2 ppc bind_8.2.3-0.potato.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/bi nd_8.2.3-0.potato.1_powerpc.deb


• Debian 2.2 ppc dnsutils_8.2.3-0.potato.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/dn sutils_8.2.3-0.potato.1_powerpc.deb


• Debian 2.2 sparc bind-dev_8.2.3-0.potato.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/bind -dev_8.2.3-0.potato.1_sparc.deb


• Debian 2.2 sparc bind_8.2.3-0.potato.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/bind _8.2.3-0.potato.1_sparc.deb


• Debian 2.2 sparc dnsutils_8.2.3-0.potato.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/dnsu tils_8.2.3-0.potato.1_sparc.deb


• Immunix 6.2 i386 bind-8.2.3-0.6.x_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-8.2.3-0.6.x_StackGu ard.i386.rpm


• Immunix 6.2 i386 bind-devel-8.2.3-0.6.x_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-devel-8.2.3-0.6.x_S tackGuard.i386.rpm


• Immunix 6.2 i386 bind-utils-8.2.3-0.6.x_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-utils-8.2.3-0.6.x_S tackGuard.i386.rpm


• Immunix 7.0 Beta bind-8.2.3-1_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-8.2.3-1_StackG uard.i386.rpm


• Immunix 7.0 Beta bind-devel-8.2.3-1_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-devel-8.2.3-1_ StackGuard.i386.rpm


• Immunix 7.0 Beta bind-utils-8.2.3-1_StackGuard.i386.rpm
  http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-utils-8.2.3-1_ StackGuard.i386.rpm


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz


• MandrakeSoft 7.2 i386 bind-utils-8.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-uti ls-8.2.3-1.1mdk.i586.rpm


• MandrakeSoft 6.0 i386 bind-8.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-8.2 .3-1.3mdk.i586.rpm


• MandrakeSoft 6.0 i386 bind-devel-8.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-dev el-8.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.0 i386 bind-utils-8.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-uti ls-8.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.1 i386 bind-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-8.2 .3-1.2mdk.i586.rpm


• MandrakeSoft 6.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 6.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 7.0 i386 bind-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-8.2 .3-1.2mdk.i586.rpm


• MandrakeSoft 7.0 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 7.0 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 7.1 i386 bind-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-8.2 .3-1.2mdk.i586.rpm


• MandrakeSoft 7.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 7.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft 7.2 i386 bind-8.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-8.2 .3-1.1mdk.i586.rpm


• MandrakeSoft 7.2 i386 bind-devel-8.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-dev el-8.2.3-1.1mdk.i586.rpm


• MandrakeSoft Corporate Server 1.0.1 i386 bind-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-8 .2.3-1.2mdk.i586.rpm


• MandrakeSoft Corporate Server 1.0.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-d evel-8.2.3-1.2mdk.i586.rpm


• MandrakeSoft Corporate Server 1.0.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-u tils-8.2.3-1.2mdk.i586.rpm


• Red Hat Inc. 5.2 alpha bind-8.2.3-0.5.x.alpha.rpm
  ftp://updates.redhat.com/5.2/alpha/bind-8.2.3-0.5.x.alpha.rpm


• Red Hat Inc. 5.2 alpha bind-devel-8.2.3-0.5.x.alpha.rpm
  ftp://updates.redhat.com/5.2/alpha/bind-devel-8.2.3-0.5.x.alpha.rpm


• Red Hat Inc. 5.2 alpha bind-utils-8.2.3-0.5.x.alpha.rpm
  ftp://updates.redhat.com/5.2/alpha/bind-utils-8.2.3-0.5.x.alpha.rpm


• Red Hat Inc. 5.2 i386 bind-8.2.3-0.5.x.i386.rpm
  ftp://updates.redhat.com/5.2/i386/bind-8.2.3-0.5.x.i386.rpm


• Red Hat Inc. 5.2 i386 bind-devel-8.2.3-0.5.x.i386.rpm
  ftp://updates.redhat.com/5.2/i386/bind-devel-8.2.3-0.5.x.i386.rpm


• Red Hat Inc. 5.2 i386 bind-utils-8.2.3-0.5.x.i386.rpm
  ftp://updates.redhat.com/5.2/i386/bind-utils-8.2.3-0.5.x.i386.rpm


• Red Hat Inc. 5.2 sparc bind-8.2.3-0.5.x.sparc.rpm
  ftp://updates.redhat.com/5.2/sparc/bind-8.2.3-0.5.x.sparc.rpm


• Red Hat Inc. 5.2 sparc bind-devel-8.2.3-0.5.x.sparc.rpm
  ftp://updates.redhat.com/5.2/sparc/bind-devel-8.2.3-0.5.x.sparc.rpm


• Red Hat Inc. 5.2 sparc bind-utils-8.2.3-0.5.x.sparc.rpm
  ftp://updates.redhat.com/5.2/sparc/bind-utils-8.2.3-0.5.x.sparc.rpm


• Red Hat Inc. 6.2 alpha bind-8.2.3-0.6.x.alpha.rpm
  ftp://updates.redhat.com/6.2/alpha/bind-8.2.3-0.6.x.alpha.rpm


• Red Hat Inc. 6.2 alpha bind-devel-8.2.3-0.6.x.alpha.rpm
  ftp://updates.redhat.com/6.2/alpha/bind-devel-8.2.3-0.6.x.alpha.rpm


• Red Hat Inc. 6.2 alpha bind-utils-8.2.3-0.6.x.alpha.rpm
  ftp://updates.redhat.com/6.2/alpha/bind-utils-8.2.3-0.6.x.alpha.rpm


• Red Hat Inc. 6.2 i386 bind-8.2.3-0.6.x.i386.rpm
  ftp://updates.redhat.com/6.2/i386/bind-8.2.3-0.6.x.i386.rpm


• Red Hat Inc. 6.2 i386 bind-devel-8.2.3-0.6.x.i386.rpm
  ftp://updates.redhat.com/6.2/i386/bind-devel-8.2.3-0.6.x.i386.rpm


• Red Hat Inc. 6.2 i386 bind-utils-8.2.3-0.6.x.i386.rpm
  ftp://updates.redhat.com/6.2/i386/bind-utils-8.2.3-0.6.x.i386.rpm


• Red Hat Inc. 6.2 sparc bind-8.2.3-0.6.x.sparc.rpm
  ftp://updates.redhat.com/6.2/sparc/bind-8.2.3-0.6.x.sparc.rpm


• Red Hat Inc. 6.2 sparc bind-devel-8.2.3-0.6.x.sparc.rpm
  ftp://updates.redhat.com/6.2/sparc/bind-devel-8.2.3-0.6.x.sparc.rpm


• Red Hat Inc. 6.2 sparc bind-utils-8.2.3-0.6.x.sparc.rpm
  ftp://updates.redhat.com/6.2/sparc/bind-utils-8.2.3-0.6.x.sparc.rpm


• Red Hat Inc. 7.0 alpha bind-8.2.3-1.alpha.rpm
  ftp://updates.redhat.com/7.0/alpha/bind-8.2.3-1.alpha.rpm


• Red Hat Inc. 7.0 alpha bind-devel-8.2.3-1.alpha.rpm
  ftp://updates.redhat.com/7.0/alpha/bind-devel-8.2.3-1.alpha.rpm


• Red Hat Inc. 7.0 alpha bind-utils-8.2.3-1.alpha.rpm
  ftp://updates.redhat.com/7.0/alpha/bind-utils-8.2.3-1.alpha.rpm


• Red Hat Inc. 7.0 i386 bind-8.2.3-1.i386.rpm
  ftp://updates.redhat.com/7.0/i386/bind-8.2.3-1.i386.rpm


• Red Hat Inc. 7.0 i386 bind-devel-8.2.3-1.i386.rpm
  ftp://updates.redhat.com/7.0/i386/bind-devel-8.2.3-1.i386.rpm

ISC BIND 8.2.2 p4

• Caldera OpenServer <= 5.0.6a newbind.tar.Z
  ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz