Your Ad Here

Thursday, January 15, 2009 - Vulnerability Advisory

Buffer Overflows in DNS Resolver Library

Affected System(s)


Operating System

Solaris 8 **


Multiple buffer overflows exist in the BIND DNS resolver library (libbind) that allows an attacker to execute arbitrary code on vulnerable systems.


To correct the vulnerability upgrade to the most recent release of BIND. The Internet Software Consortium (ISC) currently maintains three branches of the BIND package: 4.x, 8.x and 9.x. You may download the most recent release of each branch of BIND in source code form from In addition, you may obtain further information on BIND at BIND 4.x is depreciated and will not be updated further by the ISC. BIND 8.x is still supported and will be for some time due to it's wide distribution. The latest BIND 8 series information is located at The BIND 9.x distribution which was a major rewrite of the BIND architecture is the suggested upgrade path for current 4.x or 8.x servers.

To build the BIND packages:

$tar -xvzf bind-x.x.x.tar.gz

$cd bind-x.x.x




#make install

If the version of BIND you are replacing was included with the UNIX distribution and not installed separately you may need to change the install directories using the --prefix option when running configure.

BIND should normally be run in a chroot: meaning that the running daemon cannot access files outside of it's predetermined directory tree. This helps minimize the damage from a exploited service by restricting it's access to the file system once compromised. The following guides give examples of setting up chrooted BIND environments.

Chroot-BIND HOWTO (covers BIND 9)


To determine which version of BIND you are using, you can run the following command at your console:

# name -v

named 8.2.2-P5 Tue Mar 5 17:19:57 PDT 2002


The DNS resolver libraries contain remotely exploitable buffer overflow vulnerabilities in the code used to handle DNS responses.

For more information:

Common Vulnerabilities & Exposures (CVE) Link:


IAVA Reference Number


1 comment:

Anonymous said...


If you have a website we can provide you free, fresh or redesign of your website Header(animated & static),
Banners(animated & Static), logos, Icons, mascot designs, Directory and article submission for your site
We can provide you these services free of cost if you can give us back text link from your site.
Please let me know the product of your interest, so that I can provide you more details.