Re: BIND 8.2.2-P5 Possible DOS

[Akatosh <akatosh () RAINS NET>]

> I should assume that bind 8.2.2-P5 it's vulnerable ( Please someone test and confirm this kind of dos)
> and bind-9.0.0 has no support for ZXFR .
>
> <naif@naif> [~/bind] $ find src822p5/ -type f -exec grep -i zxfr \{\}  ';' | wc -l

HMM
yep
my bind crashed
attatched is my half-assed patch

-----------
Akatosh
akatosh () rains net
DC2.DfGmL--WT--SksCre+\Cvi+BflN^MH++$-Fj~R+Ac+++!J+S+U-I--#V++[sumobj]Q+Tc++
GCSd-s:-a---C++++UL++++P---L++++E-W++N+o?K-w---O-M--V-PS+PE?YPGPt+5++XR*!tvb++(+++)DI++D++Geh+r--z-

Attachment: ns_xfr.c.patch
Description: