Virus in BIND!!!! [NOT!!!!!!]

[Joseph S D Yao]

On Thu, Mar 29, 2001 at 03:33:09PM -0500, Joseph S D Yao wrote:
...
> There is no virus in BIND.  This is a worm that attacks a vulnerability
> in older versions of BIND, including betas of 8.2.3.  Anyone using BIND
> 8 must upgrade to 8.2.3-REL.
> 
> Note also that the rootkit delivered by this worm is operating-system-
> specific.  This doesn't mean that next week, someone won't be
> delivering a version that is specific to YOUR operating system.
> 
> Anyone using BIND 8 must upgrade to 8.2.3-REL, which is not vulnerable
> to this attack.

Most of you will already have seen that 9.1.1-REL is also out.  This
should suffice for most uses, and is not at all vulnerable to this
worm.

-- 
Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
COSPO/OSIS Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.