Test ID:	1.3.6.1.4.1.25623.1.0.57388
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2006-257-01)
Summary:	The remote host is missing an update for the 'bind' package(s) announced via the SSA:2006-257-01 advisory.
Description:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the SSA:2006-257-01 advisory. Vulnerability Insight: New bind packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a Denial of Service issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] As well as here: [link moved to references] There are no known active exploits at this time. Here are the details from the Slackware 10.2 ChangeLog: +--------------------------+ patches/packages/bind-9.3.2_P1-i486-1_slack10.2.tgz: Upgraded to bind-9.3.2_P1. This update addresses a denial of service vulnerability. BIND's CHANGES file says this: 2066. [security] Handle SIG queries gracefully. [RT #16300] The best discussion I've found is in FreeBSD's advisory, so here's a link: [link moved to references] Also, fixed some missing man pages. (noticed by Xavier Thomassin -- thanks) (* Security fix *) +--------------------------+ Affected Software/OS: 'bind' package(s) on Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4095 http://lists.apple.com/archives/security-announce/2007/May/msg00004.html BugTraq ID: 19859 http://www.securityfocus.com/bid/19859 Bugtraq: 20060908 rPSA-2006-0166-1 bind bind-utils (Google Search) http://www.securityfocus.com/archive/1/445600/100/0/threaded CERT/CC vulnerability note: VU#915404 http://www.kb.cert.org/vuls/id/915404 Debian Security Information: DSA-1172 (Google Search) http://www.us.debian.org/security/2006/dsa-1172 FreeBSD Security Advisory: FreeBSD-SA-06:20.bind http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc http://security.gentoo.org/glsa/glsa-200609-11.xml HPdes Security Advisory: HPSBTU02207 https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HPdes Security Advisory: SSRT061213 HPdes Security Advisory: SSRT061239 HPdes Security Advisory: SSRT071304 http://www.mandriva.com/security/advisories?name=MDKSA-2006:163 http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en OpenBSD Security Advisory: [3.9] 20060908 010: SECURITY FIX: September 8, 2006 http://www.openbsd.org/errata.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html http://securitytracker.com/id?1016794 http://secunia.com/advisories/21752 http://secunia.com/advisories/21786 http://secunia.com/advisories/21816 http://secunia.com/advisories/21818 http://secunia.com/advisories/21828 http://secunia.com/advisories/21835 http://secunia.com/advisories/21838 http://secunia.com/advisories/21912 http://secunia.com/advisories/21926 http://secunia.com/advisories/22298 http://secunia.com/advisories/24950 http://secunia.com/advisories/25402 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241 SuSE Security Announcement: SUSE-SR:2006:023 (Google Search) http://www.novell.com/linux/security/advisories/2006_23_sr.html SuSE Security Announcement: SUSE-SR:2006:024 (Google Search) http://www.novell.com/linux/security/advisories/2006_24_sr.html http://www.ubuntu.com/usn/usn-343-1 http://www.vupen.com/english/advisories/2006/3473 http://www.vupen.com/english/advisories/2007/1401 http://www.vupen.com/english/advisories/2007/1939 XForce ISS Database: bind-dnssec-rrset-dos(28745) https://exchange.xforce.ibmcloud.com/vulnerabilities/28745 Common Vulnerability Exposure (CVE) ID: CVE-2006-4096 AIX APAR: IY89169 http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169 AIX APAR: IY89178 http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178 CERT/CC vulnerability note: VU#697164 http://www.kb.cert.org/vuls/id/697164 HPdes Security Advisory: HPSBOV03226 http://marc.info/?l=bugtraq&m=141879471518471&w=2 HPdes Security Advisory: SSRT101004 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623 http://secunia.com/advisories/21790 http://www.vupen.com/english/advisories/2006/3511 XForce ISS Database: bind-recursive-insist-dos(28744) https://exchange.xforce.ibmcloud.com/vulnerabilities/28744
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.