CERT Warns Of Bind Security FlawCERT Warns Of Bind Security Flaw

CERT Coordination Center is warning of a new vulnerability in software used to correlate Internet domain names into their actual numerical addresses. The flaw, which could make segments of the Internet susceptible to denial-of-service attacks, is found only in domain name system servers running Bind (Berkeley Internet Domain) version 9. Previous versions and the current 9.2.1 version are not affected, the security advisory group said in a statement.

An attacker exploiting this vulnerability could shut down Bind servers, making Web sites and E-mail unavailable, according to CERT. However, attackers would not be able to gain control of a system.

The security of DNS is a serious concern for the Internet Corporation for Assigned Names and Numbers, which has formed a committee to study the issue.

More information is available at www.cert.org, advisory CA-2002-15.