[53359] in North American Network Operators' Group
Re: new bind vuln
daemon@ATHENA.MIT.EDU (Michael H. Warfield)
Tue Nov 12 23:05:50 2002
Date: Tue, 12 Nov 2002 23:05:12 -0500
From: "Michael H. Warfield" <mhw@wittsend.com>
To: Gerald <gcoon@inch.com>
Cc: nanog@merit.edu
Mail-Followup-To: Gerald <gcoon@inch.com>, nanog@merit.edu
In-Reply-To: <20021112180418.V89907-100000@kod.inch.com>
Errors-To: owner-nanog-outgoing@merit.edu
--VbJkn9YxBvnuCH5J
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Nov 12, 2002 at 06:10:14PM -0500, Gerald wrote:
> Haven't seen mention of this yet today and DNS affects most everyone in
> some way. The advisory was released a day early according to FreeBSD
> security officer.
The FreeBSD security officer was having a serious bout of
optical rectitus (did that make it past the censor... I did promise
no more violations of short monosylables...). The release was not
a day early, the release was on the date that ISS and ISC agreed on.
Actually, I'll take that back... The FreeBSD security officer
was "Notified this morning by CERT. The notification indicated that ISS
would go public tomorrow (not today)...". So it's unclear as to who
was suffering from optical rectitus, the FreeBSD dude or CERT. If
he received the notification in the morning, was it sent the prior
evening and he didn't get the time jump across midnight, or did CERT
suffer from a similar brain fart (opppsss... Is that a banned word?).
IAC... The advisory was negotiated and agreed upon between ISS and ISC
(who was notified by ISS on Oct 25). It went out as agreed upon and as
scheduled and as CERT was notified of. You figure out where the dain
bramage lay...
> http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=3D21469
> &
> http://marc.theaimsgroup.com/?l=3Dfreebsd-security&m=3D103712312402461&w=
=3D2
> G
Mike
--=20
Michael H. Warfield | (770) 985-6132 | mhw@WittsEnd.com
/\/\|=3Dmhw=3D|\/\/ | (678) 463-0932 | http://www.wittsend.com/=
mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
--VbJkn9YxBvnuCH5J
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQCVAwUBPdHPeOHJS0bfHdRxAQGxtAQAjBvgDh4w8ZpZXzizbYfv+QnzA6FtzinU
apMvmK4FpJCN0QApjB3d6BLT/KmLpzyvMi2sbXrQyo2PyLbmDs7ulaYtm8uSdqKZ
CjyD6BCoceRv1vkCYBjHDhUxhS1W1UwuziRSjuQqSCbSaACXk2IU0V7B64QT5ySD
esDvKGD70Uw=
=ydXN
-----END PGP SIGNATURE-----
--VbJkn9YxBvnuCH5J--