BIND 9 DNS server Vulnerability and Patch Announced

First published: July 2007

Amit Klein, security researcher and CTO of Trusteer, has released details of a BIND 9 cache poisoning issue. The vulnerability makes pharming attacks feasible against unpatched BIND 9 caching DNS servers. Internet Systems Consortium Inc., the developers of BIND, have released BIND 9.4.1-P1, which fixes the problem.

All sites that utilise BIND are advised to upgrade.