DNS exploit code is in the wild

[Jeremy C. Reed]

On Thu, 24 Jul 2008, Nelson Serafica wrote:

> This new has been lurking in the Internet. One of our DNS running bind
> seems got a POOR score. Does anyone knows a patch how to make bind
> listen to random port for any query.

Please visit the ISC BIND website at http://www.isc.org/

http://www.isc.org/sw/bind/bind-security.php has details.

> This seems a critical and needs some attention. I'm new to this lists so 
> if there's already a solution, please advise it again.

Also please join the bind-announce mailing list.
http://www.isc.org/sw/bind/bind-lists.php