ISC BIND 8.1

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

DNS cache poisoning via BIND, by predictable query IDs.

Denial of service in BIND named via maxdname.

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.