If a particular vendor is not listed below, we have not received their comments. Caldera Systems OpenLinux 2.3, eServer 2.3.1 and eDesktop 2.4 are all vulnerable. At the time of writing this document, the problems identified are currently still under evaluation by engineering. Inc. No supported version of FreeBSD contains BIND 4.x, so this does not affect us. We current ship betas of 8.2.3 in the FreeBSD 4.x release branch, and will be upgrading to 8.2.3 once it is released.
Fixes are in process.
We also thank the Internet Software Consortium for providing patches to fix the vulnerabilities. This document was written by Jeffrey P. Lanza, Cory Cohen, Ian Finlay, and Shawn Hernan. Using encryption We strongly urge you to encrypt sensitive information sent by email. If you prefer to use DES, please call the CERT hotline for more information. Carnegie Mellon University makes no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material.