Re: [cobalt-users] hacking

[Cobalt <cobalt@xxxxxxxxxxxxxxxxxxxxxxxx>]

Hi,

This should help (The RPM way is fine, but not if someone installed a
newer version without using an RPM) just start by typing nslookup and
follow on screen. ns2.intervention.co.uk is the nameserver I queried in
this test.

[root@princess /root]# nslookup
Default Server:  localhost
Address:  127.0.0.1

> server 127.0.0.1
Default Server:  localhost
Address:  127.0.0.1

> 
> fatal flex scanner internal error--end of buffer missed
[root@princess /root]# nslookup
Default Server:  localhost
Address:  127.0.0.1

> server ns2.intervention.co.uk
Default Server:  ns2.intervention.co.uk
Address:  62.172.163.67

> set type=txt
> set class=chaos
> version.bind
Server:  ns2.intervention.co.uk
Address:  62.172.163.67

VERSION.BIND    text = "8.2.2-P5"
> exit
[root@princess /root]# 

I hope that makes sense!

--Neil

On Mon, 8 May 2000, Mike Fritsch wrote:

> Can someone tell me the command to find out what version of BIND I am
> running?
> 
> Thanks
> 
> 
> ----- Original Message -----
> From: Brandon Wheaton <brandonw@xxxxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Sent: Monday, May 08, 2000 8:15 PM
> Subject: RE: [cobalt-users] hacking
> 
> 
> > You can get the information you require (and then some) here:
> > http://www.isc.org/products/BIND/
> >
> > Brandon Wheaton
> > UNIX Systems Engineer
> > ValiCert, Inc.
> > 1215 Terra Bella Ave.
> > Mountain View, CA 94043
> > 650.567.5430
> > ----
> > Computers are useless; they can only provide answers.
> > ~Pablo Picasso
> >
> > -----Original Message-----
> > From: Mike Fritsch [mailto:moley187@xxxxxxxxxxxxx]
> > Sent: Monday, May 08, 2000 7:41 PM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: Re: [cobalt-users] hacking
> >
> >
> > Which versions of bind are vurnerable. How do we defend against this
> > bug? I
> > read the article at cert.org but it did not say enough.
> >
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>