A vulnerability was discovered in BIND, a domain name server, whereby a malicious name server could return authoritative negative responses with a large TTL (time-to-live) value, thereby rendering a domain name unreachable. A successful attack would require that a vulnerable BIND instance submit a query to a malicious nameserver. The bind9 package is not affected by this vulnerability. For the current stable distribution (woody) this problem has been fixed in version 1:8.3.3-2.0woody2. For the unstable distribution (sid) this problem has been fixed in version 1:8.4.3-1. We recommend that you update your bind package.
A vulnerability was discovered in BIND, a domain name server, whereby a malicious name server could return authoritative negative responses with a large TTL (time-to-live) value, thereby rendering a domain name unreachable. A successful attack would require that a vulnerable BIND instance submit a query to a malicious nameserver.
The bind9 package is not affected by this vulnerability.
For the current stable distribution (woody) this problem has been fixed in version 1:8.3.3-2.0woody2.
For the unstable distribution (sid) this problem has been fixed in version 1:8.4.3-1.
We recommend that you update your bind package.
MD5 checksums of the listed files are available in the original advisory.