The following security announcement applies to BIND. If you have BIND installed on your system please see below for information about the vulnerability and instructions on patching your system:
It was discovered that Bind would incorrectly cache bogus NXDOMAIN
responses. When DNSSEC validation is in use, a remote attacker could
exploit this to cause a denial of service, and possibly poison DNS caches.
(CVE-2010-0097)USN-865-1 provided updated Bind packages to fix a security vulnerability.
The upstream security patch to fix CVE-2009-4022 was incomplete and
CVE-2010-0290 was assigned to the issue. This update corrects the problem.
Original advisory details:Michael Sinatra discovered that Bind did not correctly validate certain
records added to its cache. When DNSSEC validation is in use, a remote
attacker could exploit this to spoof DNS entries and poison DNS caches.
Among other things, this could lead to misdirected email and web traffic.
The above security vulnerabilities apply to the following Ubuntu releases:
- Ubuntu 6.06 LTS
- Ubuntu 8.04 LTS
- Ubuntu 8.10
- Ubuntu 9.04
- Ubuntu 9.10
If you are running BIND on Ubuntu you’ll need to apply the security update to be protected. Please follow the steps below to ensure your system is properly patched:
Apply Updates
To apply the updates run the following command(s) within your Terminal:
sudo aptitude update
sudo aptitude safe-upgrade
In general, a standard system upgrade is sufficient to effect the necessary changes.