View Single Post
Old 15th July 2008
Oko's Avatar
Oko Oko is offline
Rc.conf Instructor
 
Join Date: May 2008
Location: Kosovo, Serbia
Posts: 1,102
Default

Quote:
Originally Posted by BSDfan666 View Post
The person who found the problem has published a small test script on his website that determine if your ISP is vulnerable.

Curiously, the OpenBSD team haven't said a word about it.. nor have they done a patch, odd.
Actually you are VERY WRONG. There was a long discussion on misc@open
about vulnerability found in BIND last week and I would do a disservice to OpenBSD project if I try to repeat it or give a summery here.

You are welcome to go through archive and see what lead developers had to say about it. OpenBSD would not be OpenBSD if they were relaying on some hasty patches to fix the problem. Problem is most likely not isolated and represents whole class of new bugs.

If you can not wait for proper fix you should switch from BIND to djbdns as
it seems for now that djbdns is bullet proof.
Reply With Quote