BIND, the Berkley Internet Name Domain server, is the decentralized name-to-address service upon which the internet runs. Older versions of BIND were very vulnerable to attack, and it's taken years and major changes to reduce the risk of nasties like domain poisoning from ruining your day on the net. A new advisory warns that the current version is vulnerable to similar attacks, and suggests system administrators should upgrade the servers they steward as soon as possible to prevent the possibility of attack.
PCWorld
reports, "The problem is particularly worrisome since desktop security software is not effective at preventing this style of attack [...] The attack does not directly involve a user's computer or the DNS server, but rather data that is cached on the server."
So, patch early, patch often and save yourself some miserable headaches.
Tags: advisories, BIND, DNS, news, security