drucken bookmarks versenden konfigurieren admin pdf Sicherheit: DNS Poisoning in bind
Name: |
DNS Poisoning in bind |
|
ID: |
TLSA-2007-38 |
|
Distribution: |
TurboLinux |
|
Plattformen: |
Turbolinux 10 Server, Turbolinux 10 Server x64 Edition, Turbolinux Appliance Server 2.0, Turbolinux 8 Server, Turbolinux Appliance Server 1.0 Hosting Edition, Turbolinux Appliance Server 1.0 Workgroup Edition |
|
Datum: |
Mi, 1. August 2007, 03:50 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 |
|
Applikationen: |
BIND |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
-------------------------------------------------------------------------- Turbolinux Security Advisory TLSA-2007-38 http://www.turbolinux.co.jp/security/ security-team@turbolinux.co.jp --------------------------------------------------------------------------
Original released date: 31 Jul 2007 Last revised: 31 Jul 2007
Package: bind
Summary: DNS cache poisoning
More information: Bind includes the named name server, which resolves host names to IP addresses (and vice versa), and a resolver library (a set of routines in a system library that provide the interface for programs to use when accessing domain name services).
BIND generates cryptographically weak DNS query IDs which could allow a remote attacker to poison DNS caches.
Impact: The bind allows remote attackers to poison DNS caches.
Affected Products: - Turbolinux Appliance Server 2.0 - Turbolinux 10 Server x64 Edition - Turbolinux Appliance Server 1.0 Hosting Edition - Turbolinux Appliance Server 1.0 Workgroup Edition - Turbolinux 10 Server - Turbolinux 8 Server
<Turbolinux Appliance Server 2.0>
Source Packages Size: MD5
bind-9.2.3-13.src.rpm 3535018 0aadc97759bffd8262567f60a7f1be68
Binary Packages Size: MD5
bind-9.2.3-13.i586.rpm 371448 6a8b6349412c728d8bad08116a49148e bind-chroot-9.2.3-13.i586.rpm 9906 44d0fba52bd34ac3f9cc746528d78178 bind-libs-9.2.3-13.i586.rpm 416937 698ff65446b48828d8dfb5c940ad140c bind-utils-9.2.3-13.i586.rpm 96596 5777bec35f0105651db22f0ae4ba8fb1
<Turbolinux 10 Server x64 Edition>
Source Packages Size: MD5
bind-9.2.3-13.src.rpm 3535018 8a247a202c452a8b5be2bba53ffa65ce
Binary Packages Size: MD5
bind-9.2.3-13.x86_64.rpm 398130 2c4a21b36ac463017e545f1a6605a0c5 bind-chroot-9.2.3-13.x86_64.rpm 9835 4334d64999fb24d6e7f45ed0d571b86f bind-libs-9.2.3-13.x86_64.rpm 518285 dd650dec7f711b6e718a736c7ccc51b0 bind-utils-9.2.3-13.x86_64.rpm 107950 523e2048a2b1412c48ee557b2809f1fb
<Turbolinux Appliance Server 1.0 Hosting Edition>
Source Packages Size: MD5
bind-9.2.1-7.src.rpm 4980342 e90d17b8566a93be61cd13d9931e68bb
Binary Packages Size: MD5
bind-9.2.1-7.i586.rpm 2760412 9b2a5be6492fc275c7076d833d069b71 bind-devel-9.2.1-7.i586.rpm 728066 4f764bf8b2887d1cf989b50e733805a2 bind-utils-9.2.1-7.i586.rpm 1719033 4b56803cbdd7ae12cd33a080a837d2e4
<Turbolinux Appliance Server 1.0 Workgroup Edition>
Source Packages Size: MD5
bind-9.2.1-7.src.rpm 4980342 e72269734e23aae2348881bfb34a687b
Binary Packages Size: MD5
bind-9.2.1-7.i586.rpm 2760652 049b6a5d6539a2d8410f94b24b232a91 bind-devel-9.2.1-7.i586.rpm 728475 10fad50dc68a22a2483ce0b6ad44e1c1 bind-utils-9.2.1-7.i586.rpm 1719204 0aa93a4bc137bba77bd0e74b24faabd8
<Turbolinux 10 Server>
Source Packages Size: MD5
bind-9.2.3-13.src.rpm 3535018 0aadc97759bffd8262567f60a7f1be68
Binary Packages Size: MD5
bind-9.2.3-13.i586.rpm 371448 6a8b6349412c728d8bad08116a49148e bind-chroot-9.2.3-13.i586.rpm 9906 44d0fba52bd34ac3f9cc746528d78178 bind-libs-9.2.3-13.i586.rpm 416937 698ff65446b48828d8dfb5c940ad140c bind-utils-9.2.3-13.i586.rpm 96596 5777bec35f0105651db22f0ae4ba8fb1
<Turbolinux 8 Server>
Source Packages Size: MD5
bind-9.2.1-7.src.rpm 4980342 ffd8e7007d927d69eec2144bdeb42247
Binary Packages Size: MD5
bind-9.2.1-7.i586.rpm 2761395 08e39df3748f859ec3dcb20b375a7467 bind-devel-9.2.1-7.i586.rpm 729121 6d92c902c82b8ac8b43118f7c622776a bind-utils-9.2.1-7.i586.rpm 1719314 4928d38cbb473884c7153a2b90b7f7d5
References:
CVE [CVE-2007-2926] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926
-------------------------------------------------------------------------- Revision History 31 Jul 2007 Initial release --------------------------------------------------------------------------
Copyright(C) 2007 Turbolinux, Inc. All rights reserved.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFGrs8dK0LzjOqIJMwRAmJjAJ9eK/GJajbG/KtlNT6433L/ywGpBQCeIW4h 0i+/Qhfz7Cu52ct/wf9OBaw= =en4F -----END PGP SIGNATURE-----
|
|
|
|