Lenny frozen

July 30th, 2008

Bind cache poisoning vulnerability

July 24th, 2008

Salio el patch para el famoso fallo de DNS del cual tanto se esta hablando.

Pasos a seguir para fixear tu obsd 4.3:

# cd /usr/src
# ftp ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/004_bind.patch
Connected to openbsd.sunsite.ualberta.ca.
220-
220- Welcome to SunSITE Alberta
220-
220- at the University of Alberta, in Edmonton, Alberta, Canada
220-
220-All connections to and transfers from this server are logged. If
220-you do not like this policy, please disconnect now.
220-
220-You may want to grab the index file called "ls-lR.gz" in /pub. It is
220-updated nightly with the contents of the ftp tree.
220-
220- If you have any questions, hints, or requests, please email
220-
220- sunsite@sunsite.ualberta.ca
220-
220
331 Who are you impersonating today?
230-
230- Welcome to Sunsite Alberta
230- Login Successful.
230 Your data rate unrestricted
Remote system type is UNIX.
Using binary mode to transfer files.
200 Switching to Binary mode.
250 Directory successfully changed.
Retrieving pub/OpenBSD/patches/4.3/common/004_bind.patch
local: 004_bind.patch remote: 004_bind.patch
227 Entering Passive Mode (129,128,5,191,168,71)
150 Opening BINARY mode data connection for 004_bind.patch (61696 bytes).
100% |****************************************************************************| 61696 00:02
226 Wow, that seems to have worked.
61696 bytes received in 2.08 seconds (28.94 KB/s)
221 Goodbye.
# patch -p0 < 004_bind.patch
# cd usr.sbin/bind
# make -f Makefile.bsd-wrapper obj
# make -f Makefile.bsd-wrapper
# make -f Makefile.bsd-wrapper install

No te olvides que para realizar esto necesitas el código fuente.

# cd /usr/src
# ftp ftp://ftp.openbsd.org/pub/OpenBSD/4.3/src.tar.gz
# tar -xzf src.tar.gz

I think…

July 17th, 2008
  • I think the OpenBSD crowd is a bunch of masturbating monkeys, in that they make such a big deal about oncentrating on security to the point where they pretty much admit that nothing else matters to them.
  • Linus Tolvards

    Lorem ipsum

    July 15th, 2008

    Lorem ipsum dolor sit amet, consectetur adipisci elit, sed eiusmod tempor incidunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquid ex ea commodi consequat. Quis aute iure reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint obcaecat cupiditat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.