[rescue] The Verisign Exploit

Mike Meredith mike at blackhairy.demon.co.uk
Wed Sep 17 16:22:49 CDT 2003


On Wed, 17 Sep 2003 16:58:06 -0400, Sheldon T. Hall wrote:
> They do answer to "telnet whatabunchoffsckinggarbage.com 25", though.
> 
> And my question is ... where can I get a patched version of BIND for
> Solaris 7, one that will install with the fewest hassles?

http://www.isc.org/ for BIND9 (although they've promised to look at
BIND8)
&
http://sam.zoy.org/writings/internet/verisign/patch-bind-8.4.1.0-dickhead.diff
for BIND8.

(I haven't tried either of these ... too busy hunting down a couple of
beserk PC's that were trying to kill off my web caching servers by
repeatedly fetching URLs as fast as they possibly could)



More information about the rescue mailing list