bindvrs Vulnerability

Kevin Darcy kcd at chrysler.com
Tue Jan 12 15:51:52 UTC 2010


Hiding your version accomplishes little.

a) attackers can using "fingerprinting" technology to determine your 
BIND version even if you obscure it
b) attackers can just brute force all of the known attacks in the hopes 
that you're vulnerable to at least one of them

The real solution is to upgrade to a version that's not vulnerable.

                                                                         
                                       - Kevin
Balanagaraju Munukutla wrote:
>
> Hi
>
> How to Disable the BIND version query feature in BIND 9.2.1.
>
> This is a bindvrs Vulnerability.
>
> Thanks & Regards
> Nagaraj
> ------------------------------------------------------------------------
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users




More information about the bind-users mailing list