![](https://seccdn.libravatar.org/avatar/f8695ae06603ec883c251dda571b51a4.jpg?s=120&d=mm&r=g)
1 Apr
2000
1 Apr
'00
00:22
chrissy@rox:~ > /usr/sbin/named -v named 8.2.2-P3 Sun Nov 14 20:46:41 GMT 1999 root@snell:/usr/src/packages/BUILD/bind8-8.2.2/bin/named chrissy@rox:~ > rpm -qa |grep bind bindutil-8.2.2-8 bind8-8.2.2-8 I opened exec (512) to test X-Win32 ..so that was open too...but behind ipchains. While doing a portscan..i noticed a weird port.. 687 ..any clues? an rpm -Va showed nothing odd... Thanks much, Chrissy
Looks like a named buffer overflow exploit. What version of named are you using? -- Bob F
EMail FBob@wt.net