Your DNS servers aren't safe

[alwaysweb]

http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2897711,00.html

 

[Annette]

Are you still running BIND 8.x? The vulnerabilities described in that article and in the CERT warnings issued previous to that article are for BIND 4 and 8. Just about everyone I know on a cPanel-based server is running Bind 9.x.

 

[alwaysweb]

I'm using Bind 9.2.1, just thought I'd make sure this article was visible.

 

[wizz]

D'oh! I have just got a new server with cPanel installed, and in WHM, in the &edit setup& it asks what version of Bind I am running, and it says 8. Not being very clever with this stuff... what do I need to do to change it to 9? Just type in 9 and hit update, or do I have to install something?

 

[alwaysweb]

Try :

named -v

first to see what version of BIND you're using (I vaguely remember mine still mentioning 8 in the config you mentioned)

 

[rpmws]

[quote:d6e941c6e6][i:d6e941c6e6]Originally posted by wizz[/i:d6e941c6e6]

D'oh! I have just got a new server with cPanel installed, and in WHM, in the &edit setup& it asks what version of Bind I am running, and it says 8. Not being very clever with this stuff... what do I need to do to change it to 9? Just type in 9 and hit update, or do I have to install something?[/quote:d6e941c6e6]

from what I understand Nick explained to me that 8 or 9 in the edit setup in WHM is just a way to telling Cpanel / WHM how to talk to bind. I think 8 and 9 settings are basically the same in the background

 

[ThunderHostingDotCom]

[quote:879029af18][i:879029af18]Originally posted by alwaysweb[/i:879029af18]

Try :

named -v

first to see what version of BIND you're using (I vaguely remember mine still mentioning 8 in the config you mentioned)[/quote:879029af18]

Not to sound stupid but I know in order to try &named -v& I need to use SSH but what SSH s/w does everyone suggest?

 

[PWSowner]

I use SecureCRT from vandyke.com, but Putty is a simple and free program. It can be found easily with a search.

 

[mrprez]

Putty:

http://www.chiark.greenend.org.uk/~sgtatham/putty/

John

 

[wizz]

Ah Ha!! Yes SSH named -v (yes I use Putty too) revealed that I have Bind 9. Well T.F for that! .... but reading that artical, it seems that Bind 9 isn't without it's security issues either.