• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

ISC Bind 4 nslookupComplain() Format String Vulnerability

Solution:
The ISC strongly recommends upgrading to BIND version 9.1.0. Links to download are available below.

Sun has released Sun Alert (ID 26965) dealing with this and other issues. Please see the referenced advisory for more information.

Additional fixes are also available.


ISC BIND 4.9

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.3

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.4

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.5 P1

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.5

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.6

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.7

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.7 -T1B

• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2

• Caldera ptf7705a.pkg.Z
  ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.16/ptf7705 a.pkg.Z


• IBM AIX multiple_bind_vulns_efix.tar.Z
  ftp://ftp.software.ibm.com/aix/efixes/security/multiple_bind_vulns_efi x.tar.Z


• ISC bind-9.1.0.tar.gz
  ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz