Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2009-11-24 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
The ISC and DShield websites will be unavailable on Wednesday Nov 25th from 8-8:30 am EST.

BIND Security Advisory (DNSSEC only)

Published: 2009-11-24
Last Updated: 2009-11-24 17:19:44 UTC
by John Bambenek (Version: 1)
0 comment(s)

The other ISC (Internet Systems Consortium) has released a security advisory on BIND and security patches for nameservers running with DNSSEC validation enabled. Essentially it is possible for inappropriate caching of records from the additional records section of a query response. Typically, however, resolvers don't query in such a way as to make this a wide-impacting problem for the bulk of users.

You can read the advisory here.

Upgrade to 9.4.3-P4, 9.5.2-P1 or 9.6.1-P2.

--
John Bambenek
bambenek at gmail /dot/ com

0 comment(s)

Microsoft Security Advisory 977981 - IE 6 and IE 7

Published: 2009-11-24
Last Updated: 2009-11-24 01:50:07 UTC
by Rick Wanner (Version: 1)
0 comment(s)

Related to Marc's Diary from 11/23, Microsoft has released Security Advisory 977981.  It details vulnerabilites in Internet Explorer 6 and 7 on various operating systems.  The advisory does not provide any patches or new versions at this point, but does provide several recommendations for mitigation.

 

-- Rick Wanner - rwanner at isc dot sans dot org

0 comment(s)
Diary Archives