Virus in BIND!!!! [NOT!!!!!!]

[Joseph S D Yao]

On Wed, Mar 28, 2001 at 11:41:06AM -0300, Alfil wrote:
> 
> Hi, all ....
> 
> Please go to www.sans.org/y2k/lion.htm for more information!!!!! see this
> page and scan your system...
> 
> Pablo A. Domato
> Autored.com
> pdomato at autored.com.ar

There is no virus in BIND.  This is a worm that attacks a vulnerability
in older versions of BIND, including betas of 8.2.3.  Anyone using BIND
8 must upgrade to 8.2.3-REL.

Note also that the rootkit delivered by this worm is operating-system-
specific.  This doesn't mean that next week, someone won't be
delivering a version that is specific to YOUR operating system.

Anyone using BIND 8 must upgrade to 8.2.3-REL, which is not vulnerable
to this attack.

-- 
Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
COSPO/OSIS Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.