Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: BIND 9 Update fixing CVE-2013-3919 - Internet Security | DShield SANS ISC InfoSec Forums

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
BIND 9 Update fixing CVE-2013-3919
To quote

Richard Porter

--- ISC Handler on Duty


167 Posts
ISC Handler
We've seen a dramatic up tick in Bind/DNS version attempts. They usually come from the same IP addresses, repeatedly. This has been going on for about the last 3-4 days. Any one else seeing similar traffic? I'm wondering if it is related.
Beave! I just came here looking for hints about the same thing:
21x from
20x from
19x from

Since DNS is a stateless protocol, wouldn't it be easier to just try an exploit than to do a version check first?

I can't imagine CVE-2013-3919 (a mere DoS) being all that interesting to someone doing widespread scans - you would usually have specific target for that - so maybe this relates to something older?
Steven C.

171 Posts
