CA-2001-02: Multiple Vulnerabilities in Berkeley Internet Name Domain (BIND) Domain Name System (DNS) Servers running various versions of ISC BIND and derivatives.(Internet Software Consortium)(Brief Article)

Information Systems Auditor, April, 2001

Because the normal operation of most services on the Internet depends on the proper operation of DNS servers, other services could be impacted if these vulnerabilities are exploited.

The CERT/CC has recently learned of four vulnerabilities spanning multiple versions of the Internet Software Consortium's (ISC's) BIND server. BIND is an implementation of the DNS that is maintained by the ISC.

Because the majority of name servers in operation today run BIND, these vulnerabilities present a serious threat to the Internet infrastructure. Covert Labs at PGP Security discovered three of these vulnerabilities (VU#196945, VU#572183, and VU#868916) (and have posted an advisory regarding these issues at www.pgp.com/research/covert/advisories/047.asp). Claudio...

Read the rest of this article with a Free Trial at HighBeam Research.

Premium Content Partnership | HighBeam Research provides an in-depth online archive library of reference works.