lunchb0x
29 Jul 2009, 7:57pm
https://www.isc.org/node/474
All you have to do is point a specially crafted perl script a domain that bind is a master is master for (most installs of bind are masters of localhost) and bam, bind crashes. The fix is in source now, but hasn't hit the CentOS repos atleast. If you're running a DNS server running bind9, you should probably upgrade.
All you have to do is point a specially crafted perl script a domain that bind is a master is master for (most installs of bind are masters of localhost) and bam, bind crashes. The fix is in source now, but hasn't hit the CentOS repos atleast. If you're running a DNS server running bind9, you should probably upgrade.