OpenServer: BIND buffer overflows, Hunh ???

[Roy Arends]

On Mon, 27 Aug 2001, Mr. James W. Laferriere wrote:

> 	Hello All ,  Caldera International has sent out a security update
> 	with the above reason .  They are using 8.2.5 (rc1?) as their
> 	replacement .  Is there some deficiency in 8.2.4 ?  Or are they
> 	finally getting around to ugrading from 8.2.3 ?-} .  Tia ,  JimL

No, If you read that security update, you will see that they refer to an
old CERT Advisory:

http://www.cert.org/advisories/CA-2001-02.html

Which deals with issues in old versions of bind (before 4.9.8, and before
8.2.3). They (caldera) are simply very late with this update.

Regards,

Roy Arends
Nominum

-------------
0-14-023750-X dcrpt ths 43.0D.01 01.05.0C 84.18.03 8A.13.04 2D.0B.0A