ISC BIND Internal Memory Disclosure Vulnerability

Threat level definition

ISC BIND Internal Memory Disclosure Vulnerability

Solution:
The ISC strongly recommends upgrading to BIND version 9.1.0. Links to download are available below.

Sun has released Sun Alert (ID 26965) dealing with this and other issues. Please see the referenced advisory for more information.

Additional fixes are available.

ISC BIND 4.9

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.3

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.4

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.5

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.5 P1

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.6

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.7 -T1B

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 4.9.7

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2

Caldera ptf7705a.pkg.Z
ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.16/ptf7705 a.pkg.Z

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

IBM AIX multiple_bind_vulns_efix.tar.Z
ftp://ftp.software.ibm.com/aix/efixes/security/multiple_bind_vulns_efi x.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.1

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p3

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p6

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

TurboLinux 6.0 bind-8.2.3-2.i386.rpm
ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-8.2.3-2.i386.rp m

TurboLinux 6.0 bind-contrib-8.2.3-2.i386.rpm
ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-contrib-8.2.3-2 .i386.rpm

TurboLinux 6.0 bind-devel-8.2.3-2.i386.rpm
ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-devel-8.2.3-2.i 386.rpm

TurboLinux 6.0 bind-utils-8.2.3-2.i386.rpm
ftp://ftp.turbolinux.com/pub/updates/6.0/security/bind-utils-8.2.3-2.i 386.rpm

ISC BIND 8.2.2 p2

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p4

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p1

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

ISC BIND 8.2.2 p5

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

Slackware 7.1 i386 bind.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-7.1/patches/packages/b ind.tgz

Slackware current i386 bind.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slakware/n1/bi nd.tgz

ISC BIND 8.2.2 p7

Caldera OpenServer <= 5.0.6a newbind.tar.Z
ftp://ftp.sco.com/pub/security/openserver/sr379322/newbind.tar.Z

Caldera eDesktop 2.4 bind-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-8.2.3-1.i386.rpm

Caldera eDesktop 2.4 bind-doc-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-doc-8.2.3-1.i386.rpm

Caldera eDesktop 2.4 bind-utils-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eDesktop/2.4/current/RPMS/RPM S/bind-utils-8.2.3-1.i386.rpm

Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-8.2.3-1.i386.rpm

Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-doc-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-doc-8.2.3-1.i386.rpm

Caldera eServer 2.3.1/eBuilder for ECential 3.0 bind-utils-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/eServer/2.3/current/RPMS/RPMS /bind-utils-8.2.3-1.i386.rpm

Caldera OpenLinux 2.3 bind-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-8.2.3-1.i386.rpm

Caldera OpenLinux 2.3 bind-doc-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-doc-8.2.3-1.i386.rpm

Caldera OpenLinux 2.3 bind-utils-8.2.3-1.i386.rpm
ftp://ftp.calderasystems.com/pub/updates/OpenLinux/2.3/current/RPMS/RP MS/bind-utils-8.2.3-1.i386.rpm

Debian 2.2 alpha bind-dev_8.2.3-0.potato.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/bind -dev_8.2.3-0.potato.1_alpha.deb

Debian 2.2 alpha bind_8.2.3-0.potato.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/bind _8.2.3-0.potato.1_alpha.deb

Debian 2.2 alpha dnsutils_8.2.3-0.potato.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/dnsu tils_8.2.3-0.potato.1_alpha.deb

Debian 2.2 arm bind-dev_8.2.3-0.potato.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/bind-d ev_8.2.3-0.potato.1_arm.deb

Debian 2.2 arm bind_8.2.3-0.potato.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/bind_8 .2.3-0.potato.1_arm.deb

Debian 2.2 arm dnsutils_8.2.3-0.potato.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/dnsuti ls_8.2.3-0.potato.1_arm.deb

Debian 2.2 i386 bind-dev_8.2.3-0.potato.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/bind- dev_8.2.3-0.potato.1_i386.deb

Debian 2.2 i386 bind_8.2.3-0.potato.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/bind_ 8.2.3-0.potato.1_i386.deb

Debian 2.2 i386 dnsutils_8.2.3-0.potato.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/dnsut ils_8.2.3-0.potato.1_i386.deb

Debian 2.2 m68k bind-dev_8.2.3-0.potato.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/bind- dev_8.2.3-0.potato.1_m68k.deb

Debian 2.2 m68k bind_8.2.3-0.potato.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/bind_ 8.2.3-0.potato.1_m68k.deb

Debian 2.2 m68k dnsutils_8.2.3-0.potato.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/dnsut ils_8.2.3-0.potato.1_m68k.deb

Debian 2.2 ppc bind-dev_8.2.3-0.potato.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/bi nd-dev_8.2.3-0.potato.1_powerpc.deb

Debian 2.2 ppc bind_8.2.3-0.potato.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/bi nd_8.2.3-0.potato.1_powerpc.deb

Debian 2.2 ppc dnsutils_8.2.3-0.potato.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/dn sutils_8.2.3-0.potato.1_powerpc.deb

Debian 2.2 sparc bind-dev_8.2.3-0.potato.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/bind -dev_8.2.3-0.potato.1_sparc.deb

Debian 2.2 sparc bind_8.2.3-0.potato.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/bind _8.2.3-0.potato.1_sparc.deb

Debian 2.2 sparc dnsutils_8.2.3-0.potato.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/dnsu tils_8.2.3-0.potato.1_sparc.deb

Immunix 6.2 i386 bind-8.2.3-0.6.x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-8.2.3-0.6.x_StackGu ard.i386.rpm

Immunix 6.2 i386 bind-devel-8.2.3-0.6.x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-devel-8.2.3-0.6.x_S tackGuard.i386.rpm

Immunix 6.2 i386 bind-utils-8.2.3-0.6.x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/bind-utils-8.2.3-0.6.x_S tackGuard.i386.rpm

Immunix 7.0 Beta bind-8.2.3-1_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-8.2.3-1_StackG uard.i386.rpm

Immunix 7.0 Beta bind-devel-8.2.3-1_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-devel-8.2.3-1_ StackGuard.i386.rpm

Immunix 7.0 Beta bind-utils-8.2.3-1_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/bind-utils-8.2.3-1_ StackGuard.i386.rpm

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

MandrakeSoft 7.2 i386 bind-utils-8.2.3-1.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-uti ls-8.2.3-1.1mdk.i586.rpm

MandrakeSoft 6.0 i386 bind-8.2.3-1.3mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-8.2 .3-1.3mdk.i586.rpm

MandrakeSoft 6.0 i386 bind-devel-8.2.3-1.3mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-dev el-8.2.3-1.3mdk.i586.rpm

MandrakeSoft 6.0 i386 bind-utils-8.2.3-1.3mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.0/RPMS/bind-uti ls-8.2.3-1.3mdk.i586.rpm

MandrakeSoft 6.1 i386 bind-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-8.2 .3-1.2mdk.i586.rpm

MandrakeSoft 6.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 6.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/6.1/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 7.0 i386 bind-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-8.2 .3-1.2mdk.i586.rpm

MandrakeSoft 7.0 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 7.0 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.0/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 7.1 i386 bind-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-8.2 .3-1.2mdk.i586.rpm

MandrakeSoft 7.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-dev el-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 7.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.1/RPMS/bind-uti ls-8.2.3-1.2mdk.i586.rpm

MandrakeSoft 7.2 i386 bind-8.2.3-1.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-8.2 .3-1.1mdk.i586.rpm

MandrakeSoft 7.2 i386 bind-devel-8.2.3-1.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/7.2/RPMS/bind-dev el-8.2.3-1.1mdk.i586.rpm

MandrakeSoft Corporate Server 1.0.1 i386 bind-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-8 .2.3-1.2mdk.i586.rpm

MandrakeSoft Corporate Server 1.0.1 i386 bind-devel-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-d evel-8.2.3-1.2mdk.i586.rpm

MandrakeSoft Corporate Server 1.0.1 i386 bind-utils-8.2.3-1.2mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/1.0.1/RPMS/bind-u tils-8.2.3-1.2mdk.i586.rpm

Red Hat Inc. 5.2 alpha bind-8.2.3-0.5.x.alpha.rpm
ftp://updates.redhat.com/5.2/alpha/bind-8.2.3-0.5.x.alpha.rpm

Red Hat Inc. 5.2 alpha bind-devel-8.2.3-0.5.x.alpha.rpm
ftp://updates.redhat.com/5.2/alpha/bind-devel-8.2.3-0.5.x.alpha.rpm

Red Hat Inc. 5.2 alpha bind-utils-8.2.3-0.5.x.alpha.rpm
ftp://updates.redhat.com/5.2/alpha/bind-utils-8.2.3-0.5.x.alpha.rpm

Red Hat Inc. 5.2 i386 bind-8.2.3-0.5.x.i386.rpm
ftp://updates.redhat.com/5.2/i386/bind-8.2.3-0.5.x.i386.rpm

Red Hat Inc. 5.2 i386 bind-devel-8.2.3-0.5.x.i386.rpm
ftp://updates.redhat.com/5.2/i386/bind-devel-8.2.3-0.5.x.i386.rpm

Red Hat Inc. 5.2 i386 bind-utils-8.2.3-0.5.x.i386.rpm
ftp://updates.redhat.com/5.2/i386/bind-utils-8.2.3-0.5.x.i386.rpm

Red Hat Inc. 5.2 sparc bind-8.2.3-0.5.x.sparc.rpm
ftp://updates.redhat.com/5.2/sparc/bind-8.2.3-0.5.x.sparc.rpm

Red Hat Inc. 5.2 sparc bind-devel-8.2.3-0.5.x.sparc.rpm
ftp://updates.redhat.com/5.2/sparc/bind-devel-8.2.3-0.5.x.sparc.rpm

Red Hat Inc. 5.2 sparc bind-utils-8.2.3-0.5.x.sparc.rpm
ftp://updates.redhat.com/5.2/sparc/bind-utils-8.2.3-0.5.x.sparc.rpm

Red Hat Inc. 6.2 alpha bind-8.2.3-0.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/alpha/bind-8.2.3-0.6.x.alpha.rpm

Red Hat Inc. 6.2 alpha bind-devel-8.2.3-0.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/alpha/bind-devel-8.2.3-0.6.x.alpha.rpm

Red Hat Inc. 6.2 alpha bind-utils-8.2.3-0.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/alpha/bind-utils-8.2.3-0.6.x.alpha.rpm

Red Hat Inc. 6.2 i386 bind-8.2.3-0.6.x.i386.rpm
ftp://updates.redhat.com/6.2/i386/bind-8.2.3-0.6.x.i386.rpm

Red Hat Inc. 6.2 i386 bind-devel-8.2.3-0.6.x.i386.rpm
ftp://updates.redhat.com/6.2/i386/bind-devel-8.2.3-0.6.x.i386.rpm

Red Hat Inc. 6.2 i386 bind-utils-8.2.3-0.6.x.i386.rpm
ftp://updates.redhat.com/6.2/i386/bind-utils-8.2.3-0.6.x.i386.rpm

Red Hat Inc. 6.2 sparc bind-8.2.3-0.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/sparc/bind-8.2.3-0.6.x.sparc.rpm

Red Hat Inc. 6.2 sparc bind-devel-8.2.3-0.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/sparc/bind-devel-8.2.3-0.6.x.sparc.rpm

Red Hat Inc. 6.2 sparc bind-utils-8.2.3-0.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/sparc/bind-utils-8.2.3-0.6.x.sparc.rpm

Red Hat Inc. 7.0 alpha bind-8.2.3-1.alpha.rpm
ftp://updates.redhat.com/7.0/alpha/bind-8.2.3-1.alpha.rpm

Red Hat Inc. 7.0 alpha bind-devel-8.2.3-1.alpha.rpm
ftp://updates.redhat.com/7.0/alpha/bind-devel-8.2.3-1.alpha.rpm

Red Hat Inc. 7.0 alpha bind-utils-8.2.3-1.alpha.rpm
ftp://updates.redhat.com/7.0/alpha/bind-utils-8.2.3-1.alpha.rpm

Red Hat Inc. 7.0 i386 bind-8.2.3-1.i386.rpm
ftp://updates.redhat.com/7.0/i386/bind-8.2.3-1.i386.rpm

Red Hat Inc. 7.0 i386 bind-devel-8.2.3-1.i386.rpm
ftp://updates.redhat.com/7.0/i386/bind-devel-8.2.3-1.i386.rpm

ISC BIND 8.2.3 Beta

ISC bind-9.1.0.tar.gz
ftp://ftp.isc.org/isc/bind9/9.1.0/bind-9.1.0.tar.gz

Privacy Statement
Copyright 2009, SecurityFocus