Re: new bind vuln

2002-11-13 Thread Michael H. Warfield
On Wed, Nov 13, 2002 at 12:46:28AM -0500, Barney Wolff wrote: > This does beg the question (not that I hold *you* responsible!) > why the advisory had to come out before the patch. Does anyone > know whether the news had escaped to the blackhats? Otherwise > I cannot understand the rationale. >

Re: new bind vuln

2002-11-12 Thread Barney Wolff
This does beg the question (not that I hold *you* responsible!) why the advisory had to come out before the patch. Does anyone know whether the news had escaped to the blackhats? Otherwise I cannot understand the rationale. Barney On Wed, Nov 13, 2002 at 12:06:04AM -0500, Steven M. Bellovin wro

Re: new bind vuln

2002-11-12 Thread Michael H. Warfield
On Wed, Nov 13, 2002 at 12:06:04AM -0500, Steven M. Bellovin wrote: > CERT said that the ISS advisory was to be released on 13 November, and > that the patch would be available from ISC next week. There was no > indication about when CERT itself was going to issue an advisory, but > clearly so

Re: new bind vuln

2002-11-12 Thread Steven M. Bellovin
In message <[EMAIL PROTECTED]>, "Michael H. Warfield" w rites: > > >On Tue, Nov 12, 2002 at 06:10:14PM -0500, Gerald wrote: > >> Haven't seen mention of this yet today and DNS affects most everyone in >> some way. The advisory was released a day early according to FreeBSD >> security officer. > >

Re: new bind vuln

2002-11-12 Thread Andrew Brown
>> Haven't seen mention of this yet today and DNS affects most everyone in >> some way. The advisory was released a day early according to FreeBSD >> security officer. >... > Actually, I'll take that back... The FreeBSD security officer >was "Notified this morning by CERT. The notification

Re: new bind vuln

2002-11-12 Thread Michael H. Warfield
On Tue, Nov 12, 2002 at 06:10:14PM -0500, Gerald wrote: > Haven't seen mention of this yet today and DNS affects most everyone in > some way. The advisory was released a day early according to FreeBSD > security officer. Just to reiterate (I realize, in my haste, I forgot to include a ref

Re: new bind vuln

2002-11-12 Thread Michael H. Warfield
On Tue, Nov 12, 2002 at 06:10:14PM -0500, Gerald wrote: > Haven't seen mention of this yet today and DNS affects most everyone in > some way. The advisory was released a day early according to FreeBSD > security officer. The FreeBSD security officer was having a serious bout of optical re

Re: new bind vuln

2002-11-12 Thread Gerald
Apologies...missed it earlier. G On Tue, 12 Nov 2002, Gerald wrote: > > Haven't seen mention of this yet today and DNS affects most everyone in > some way. The advisory was released a day early according to FreeBSD > security officer. > > http://bvlive01.iss.net/issEn/delivery/xforce/alertdetai

new bind vuln

2002-11-12 Thread Gerald
Haven't seen mention of this yet today and DNS affects most everyone in some way. The advisory was released a day early according to FreeBSD security officer. http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469 & http://marc.theaimsgroup.com/?l=freebsd-security&m=10371231240