Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S131336AbRCWS6A>; Fri, 23 Mar 2001 13:58:00 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S131341AbRCWS5v>; Fri, 23 Mar 2001 13:57:51 -0500
Received: from mail.inconnect.com ([209.140.64.7]:8336 "HELO
	mail.inconnect.com") by vger.kernel.org with SMTP
	id <S131336AbRCWS5l>; Fri, 23 Mar 2001 13:57:41 -0500
Date: Fri, 23 Mar 2001 11:56:58 -0700 (MST)
From: Dax Kelson <dax@gurulabs.com>
To: Gerhard Mack <gmack@innerfire.net>
cc: Bob Lorenzini <hwm@newportharbornet.com>, <linux-kernel@vger.kernel.org>
Subject: Re: Linux Worm (fwd)
In-Reply-To: <Pine.LNX.4.10.10103231028250.9403-100000@innerfire.net>
Message-ID: <Pine.LNX.4.30.0103231150460.18026-100000@duely.gurulabs.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org

Gerhard Mack said once upon a time (Fri, 23 Mar 2001):

> On Fri, 23 Mar 2001, Bob Lorenzini wrote:
>
> > I'm annoyed when persons post virus alerts to unrelated lists but this
> > is a serious threat. If your offended flame away.
>
> This should be a wake up call... distributions need to stop using product
> with consistently bad security records.

This TSIG bug in BIND 8 that is being exploited was added to BIND 8 by the
same team who wrote BIND 9.

In fact the last two major remote root compromises (TSIG and NXT) for BIND
8 was in code added to BIND 8 by the BIND 9 developers.

Dax

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/