From owner-FreeBSD-net-jp@jp.freebsd.org  Thu Apr  5 02:59:05 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id CAA39732;
	Thu, 5 Apr 2001 02:59:05 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from tortoise.jp.freebsd.org (root@tortoise.jp.FreeBSD.ORG [210.157.158.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id CAA39727
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 5 Apr 2001 02:59:04 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from dns0.rodfbs.net (dns0.rodfbs.net [3ffe:505:2014:1:202:b3ff:fe1c:8636])
	by tortoise.jp.freebsd.org (8.11.3+3.4W/8.11.3) with ESMTP/inet6 id f34Hx2b16018
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 5 Apr 2001 02:59:02 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from v6gw1.rodfbs.net (v6gw1.rodfbs.net [2001:268:104:2:2a0:c9ff:fe97:e164])
	by dns0.rodfbs.net (8.11.3+3.4W/3.7Wpl2+smtpcheck-local-2.34(ayamura)-rodfbs-3.0-00112802) with ESMTP id f34Hwxh31483
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 5 Apr 2001 02:58:59 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
Received: from localhost (localhost [127.0.0.1])
	by v6gw1.rodfbs.net (8.11.3+3.4W/3.7Wpl2+smtpcheck-local-2.34(ayamura)-rodfbs-3.0-00112801) with ESMTP id f34Hviu82646
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 5 Apr 2001 02:57:44 +0900 (JST)
	(envelope-from eakasaka@akasaka-rodfbs.omiya.saitama.jp)
To: FreeBSD-net-jp@jp.freebsd.org
From: Eriya Akasaka (=?iso-2022-jp?B?GyRCQFY6ZEEqOkgbKEI=?=)
 <eakasaka@rodfbs.org>
In-Reply-To: <NDBBJMMEALIOGFCNDMCGKEGFCFAA.w-tada@muc.biglobe.ne.jp>
References: <NDBBJMMEALIOGFCNDMCGKEGFCFAA.w-tada@muc.biglobe.ne.jp>
X-Mailer: Mew version 1.94.2 on XEmacs 21.1 (Cuyahoga Valley)
X-PGP-Fingerprint20: D50A 84E7 E8F9 CAD8 FB79  B7ED 16FA 763A 1CCA B257
X-PGP-Public-Key-URL: http://pgp.nic.ad.jp:11371/pks/lookup?op=get&search=0x1CCAB257
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20010405025743X.eakasaka@akasaka-rodfbs.omiya.saitama.jp>
Date: Thu, 05 Apr 2001 02:57:43 +0900
X-Dispatcher: imput version 20000228(IM140)
Lines: 93
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-net-jp 3066
Subject: [FreeBSD-net-jp 3066] Re: DNS =?ISO-2022-JP?B?GyRCJTUhPBsoQg==?=
 =?ISO-2022-JP?B?GyRCJVAkciU1JVYlSSVhJSQlcyRHTikkQT5lJDIbKEI=?=
 =?ISO-2022-JP?B?GyRCJGsbKEI=?=
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: eakasaka@akasaka-rodfbs.omiya.saitama.jp

$B@V:d$G$9!#(B
$B0zMQ=g=x>/$7JQ$($^$7$?!"$4N;>52<$5$$!#(B

>>>>> In article <NDBBJMMEALIOGFCNDMCGKEGFCFAA.w-tada@muc.biglobe.ne.jp>,
	On Wed, 4 Apr 2001 00:00:29 +0900
	"[FreeBSD-net-jp 3058] Re: DNS $B%5!<%P$r%5%V%I%a%$%s$GN)$A>e$2$k(B"
	"t.wakiyama" <w-tada@muc.biglobe.ne.jp> wrote:

>>> 	$B!C(Btun0:$B%0%m!<%P%k%"%I%l%9(B
>>> 	$B!{>e0L(BDNS$B%5!<%P!'(Bminerva
>>> 	$B!C!J%I%a%$%sL>!'(Bhogehoge.co,jp)
>>> 	$B!C!J(BFreeBSD2.2.7R,BIND4.9.7)
>>> 	$B!C(BPrivateAdress:192.168.1.1
>> $B$3$N%5!<%P$OD>@\<+J,$G(B The Internet $B>e$N(B
>> $B%M!<%`%5!<%P$KJ9$-$K$$$C$F$7$^$C$F$b$h$$%]%j%7!<(B
>> $B$J$N$G$7$g$&$+!#(B
>> $B$^$?>o;~(B The Internet $B$K@\B3$5$l$F$$$k$N$G$7$g$&$+!#(B
> $B!!>e0L%5!<%P$N(Btun0$B$O(BISDN$B$r;HMQ$7$F>o;~@\B3$O8=:_$N(B
> $B!!$H$3$m%;%-%e%j%F%#LL$b9MN8$79T$C$F$$$^$;$s!#(B

> $B!!$J$N$G>e0L%5!<%P$N%]%j%7$O(BInternet$B>e$N%M!<%`%5!<%P(B
> $B!!$KD>@\J9$-$K$$$/7A$H$J$C$F$$$^$9!#(B

$B$=$l$J$i$3$C$A$N$[$&$O(B slave $B$O$J$/$F@52r$G$9!#(B
named.root $B$bDL>o$N$b$N$G$$$$$G$7$g$&!#(B
$B$?$@IaDL(B ISP $B$O!.8\5R8~$1$N%M!<%`%5!<%P$,(B 1 $BBf$@$1(B
$B$H$$$&$3$H$O$J$$$H;W$&$N$G!"(BAA.BB.CC.DD 1 $B$D$@$1$h$j$b(B
$B$b$&(B 1 $B$D(B ISP $B$NJL$N%M!<%`%5!<%P$r=q$$$?$i$I$&$G$7$g$&$+!#(B
($B0?$$$O$=$N7+$jJV$7(B)$B!#(B

$B$4B8CN$+$H$O;W$$$^$9$,!":#2s$N$h$&$J>l9g(B forwarders $B$r(B
$B=q$/$N$O2s@~$rDL$8$F$N(B DNS $B$NLd$$9g$o$;%H%i%U%#%C%/$N7Z8:$K(B
$B$"$j$^$9$+$i!":G=i$NJ}$N(B forwarders $B@h$N%-%c%C%7%e$K(B
$BL5$/$F$b$b$7$+$7$?$i<!$N(B forwarders $B@h$K$"$k$+$b$7$l$^$;$s!#(B
$B<+J,$N7@Ls$7$F$$$k(B ISP $B$@$C$?$i$=$lDx%*!<%P!<%X%C%I$K$O$J$i(B
$B$J$$$G$7$g$&!#(B

> $B!!>e0L%5!<%P$N(Btun0$B$G(Bipfw$B$r;HMQ$7%Q%1%C%H%U%#%k%?%j%s%0(B
> $B!!$r9T$C$F$$$^$9!#!J$3$N%Q%1%C%H%U%#%k%?%j%s%0$N(B
> $B!!FbMF$K$D$$$F$O>\$7$/$OJ,$+$j$^$;$s$,!"$b$7I,MW(B
> $B!!$J$i$P>e0L%5!<%P$N4IM}<T$KL@F|Ld$$9g$o$;$^$9!#!K(B

$B$"$NLd$$9g$o$;$7$F$$$?$@$+$J$/$F$$$$$G$9!#(B
$B=i$a$N?^8+$?$H$-!">!<j$K%U%l%C%D$+2?$+$G!"(B
forwarders AA.BB.CC.DD $B$H$+$"$C$?$N$G!"(B
DNS $B$N%=!<%9%"%I%l%9$O(B AA.BB.CC.DD $B$@$1$r(B
$B5v2D$9$k$N$+$J$H!"LQA[$7$F$$$^$7$?!#(B

$B46A[$H$7$F$O0l;~E*$K$;$h(B tun0 $B$K%0%m!<%P%k(B IP $B?6$i$l$F(B
$BA4@$3&$KBP$7%"%s%0%j$H8}$r3+$1$FBT$C$F$$$k$o$1$G$9$h$M!#(B
$B%]!<%H$O%U%#%k%?$+$1$i$l$F$b(B DNS $B$K$D$$$F$O%=!<%9%"%I%l%9$O(B
$B$+$1$i$l$J$$$o$1$G$9$h$M!#(B

http://www.cert.org/advisories/CA-2001-02.html

$B$K=P$F$$$k0J2<$N(B 3 $BE@(B

Vulnerability Note VU#572183
ISC BIND 4 contains buffer overflow in nslookupComplain()
http://www.kb.cert.org/vuls/id/572183

Vulnerability Note VU#868916
ISC BIND 4 contains input validation error in nslookupComplain()
http://www.kb.cert.org/vuls/id/868916

Vulnerability Note VU#325431
Queries to ISC BIND servers may disclose environment variables
http://www.kb.cert.org/vuls/id/325431

$B$+$i!"(BBIND-4.9.7 $B$G$O$A$HIT0B(B 4.9.8 $B$K$7$?$[$&$,(B
$B$h$$$N$G$O!"$H!"?4G[@-$G$7$g$&$+!#(B

>>> 	$B!C(BPrivateAdress:192.168.1.2
>>> 	$B!{2<0L(BDNS$B%5!<%P!'(Bfox
>>> 	$B!C!J%I%a%$%sL>!'(Bxxx.hogehoge.co.jp$B!K(B
>>> 	$B!C!J(BFreeBSD3.5.1R,BIND8.2.2$B!K(B
>>> 	$B!C(BPrivateAdress:192.168.10.1
> $B!!2<0L%5!<%P$K4X$7$F$O8=:_!"9=C[$r;O$a$?$P$+$j$G(B
> $B!!%k!<%F%#%s%0@_Dj$r9T$C$?$P$+$j$G<!$N%9%F%C%W$H$7$F(B
> $B!!(BDNS$B$N@_Dj$r;O$a$?$H$3$m$G$9!#>-MhE*$K$O(B192.168.1$B$H(B
> $B!!(B192.168.10$B$N4V$G$b(Bipfw$BEy$r;HMQ$7%U%!%$%"%&%)!<%k(B
> $B!!$r9=C[$7$h$&$H9M$($F$$$^$9$,!"8=;~E@$G$O>e0L(B
> $B!!%M%C%H%o!<%/$KBP$7$F$9$Y$F%*!<%W%s$G$9!#(B

fox $B7/$NJ}$O30It$KLd$$9g$o$;$r@dBP$K$7$F$O$J$i$J$$$N$J$i!"(B
forward only + forwarders + $B%K%;(B named.root
$B$,I,?\!"(B
minerva $B7/$HF1MM$K(Bfox $B7/$b:G=*E*$K$OA4$F<+J,$G2r7h$J$i(B
forwarders + $BK\J*(B named.root
$B$H$$$C$?$H$3$m$G$7$g$&$+!#(B

--$B$"$+$5$+$($j$d(B <eakasaka@rodfbs.org>
<eakasaka@akasaka-rodfbs.uinet.or.jp>
