[unisog] Query on CERT VU#800113

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Sun Jul 20 21:39:34 GMT 2008


On Fri, 18 Jul 2008 21:40:29 EDT, Alan Clegg said:

> Were you already safe because you run an unaffected server?

Alan, I thought you knew better, unless you're intentionally baiting
people. ;)

Folks - unless you've deployed DNSSEC, you are running an affected server,
*even if you have installed the recent patches*.  All the patches do is make it
more difficult to exploit the issue found by Dan Kaminsky, they do *NOT*
totally remove it.

Repeat - The recent patches only make it more difficut, they do *not* remove it.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.sans.org/pipermail/unisog/attachments/20080720/be2974db/attachment.bin 


More information about the unisog mailing list