[GTER] BIND named(8) dynamic update message remote DoS

[Wesley Miranda]

Caros,

Conforme relatado na URL https://www.isc.org/node/474 vou passar uma dica para os usuários do FreeBSD.
FreeBSD 6.3, 6.4, 7.1, 7.2 com bind9

fetch http://security.FreeBSD.org/patches/SA-09:12/bind.patch
fetch http://security.FreeBSD.org/patches/SA-09:12/bind.patch.asc

Execute os comandos com usuário root.

# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/lib/bind
# make obj && make depend && make && make install
# cd /usr/src/usr.sbin/named
# make obj && make depend && make && make install
# /etc/rc.d/named restart

A seguinte lista contém os números de revisão de cada arquivo que foi 
corrigido no FreeBSD. 

CVS:
Branch                                                           Revision
  Path
- -------------------------------------------------------------------------
RELENG_6
  src/contrib/bind9/bin/named/update.c                        1.1.1.2.2.5
RELENG_6_4
  src/UPDATING                                            1.416.2.40.2.10
  src/sys/conf/newvers.sh                                  1.69.2.18.2.12
  src/contrib/bind9/bin/named/update.c                    1.1.1.2.2.3.2.1
RELENG_6_3
  src/UPDATING                                            1.416.2.37.2.17
  src/sys/conf/newvers.sh                                  1.69.2.15.2.16
  src/contrib/bind9/bin/named/update.c                    1.1.1.2.2.2.2.1
RELENG_7
  src/contrib/bind9/bin/named/update.c                        1.1.1.5.2.3
RELENG_7_2
  src/UPDATING                                             1.507.2.23.2.6
  src/sys/conf/newvers.sh                                   1.72.2.11.2.7
  src/contrib/bind9/bin/named/update.c                    1.1.1.5.2.2.2.1
RELENG_7_1
  src/UPDATING                                            1.507.2.13.2.10
  src/sys/conf/newvers.sh                                   1.72.2.9.2.11
  src/contrib/bind9/bin/named/update.c                    1.1.1.5.2.1.4.1
HEAD
  src/contrib/bind9/bin/named/update.c                                1.4
- -------------------------------------------------------------------------
Subversion:
Branch/path                                                      Revision
- -------------------------------------------------------------------------
head/                                                             r195936
stable/6/                                                         r195934
releng/6.4/                                                       r195935
releng/6.3/                                                       r195935
stable/7/                                                         r195933
releng/7.2/                                                       r195935
releng/7.1/                                                       r195935
--------------------------------------------------------------------------

É isso ai galera desculpe a extensão do email.

Wesley Miranda
FreeBSD Consult
www.freebsdconsult.com.br