Web Browser 로는 FTP 접속이 불가능 합니다.

문서번호 : 1373138228
업데이트 : 2013.07.07


상세내용

- 9.4-ESV-R5-P1 update
- update named.root
- fixed CVE-2012-1667
- fixed CVE-2012-4244
- fixed CVE-2012-5166

. CVE-2012-1667
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle
resource records with a zero-length RDATA section, which allows remote
DNS servers to cause a denial of service (daemon crash or data corruption)
or obtain sensitive information from process memory via a crafted record.

. CVE-2012-4244
ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to
cause a denial of service (assertion failure and named daemon exit) via a
query for a long resource record.

. CVE-2012-5166
ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to
cause a denial of service (named daemon hang) via unspecified combinations
of resource records.


Autoupdates 지원 : 일부 지원
  pkgsysupdate && pkgadd -F "bind*"


update 패키지

  RPMS :

    . bind-9.4.ESV.R5.P1-1.i686.rpm
    . bind-utils-9.4.ESV.R5.P1-1.i686.rpm
    . bind-devel-9.4.ESV.R5.P1-1.i686.rpm

  SRPMS :

    . bind-9.4.ESV.R5.P1-1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166