Bugtraq mailing list archives

Re: BIND 8.2.2-P5 Possible DOS


From: Mark.Andrews () NOMINUM COM
Date: Sat, 11 Nov 2000 09:33:28 +1100

        BIND 8.2.2-P7 is now released and addresses this issue.

        http://www.isc.org/products/BIND/bind-security.html
        has also been updated to reflect this.

        Mark


[ On Wednesday, November 8, 2000 at 17:29:15 (-0500), Akatosh wrote: ]
Subject: Re: BIND 8.2.2-P5 Possible DOS

attatched is my half-assed patch

I think this is all that's really necessary.  It's working so far for me
anyway....

Index: src/bin/named/ns_xfr.c
===================================================================
RCS file: /cvs/misc/bind8/src/bin/named/ns_xfr.c,v
retrieving revision 1.1.1.3
diff -c -r1.1.1.3 ns_xfr.c
*** src/bin/named/ns_xfr.c    1999/11/11 06:06:09     1.1.1.3
--- src/bin/named/ns_xfr.c    2000/11/09 20:49:45
***************
*** 97,103 ****
                         "unsupported XFR (type %s) of \"%s\" (%s) to %s",
                      p_type(type), zones[zone].z_origin, p_class(class),
                      sin_ntoa(qsp->s_from));
!             goto abort;
      }

  #ifdef SO_SNDBUF
--- 97,104 ----
                         "unsupported XFR (type %s) of \"%s\" (%s) to %s",
                      p_type(type), zones[zone].z_origin, p_class(class),
                      sin_ntoa(qsp->s_from));
!             (void) shutdown(qsp->s_rfd, 2);
!             return;
      }

  #ifdef SO_SNDBUF

--
                                                      Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods () acm org>      <robohack!woods>
Planix, Inc. <woods () planix com>; Secrets of the Weird <woods () weird com>
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews () nominum com


Current thread: