Path: csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!2.eu.feeder.erje.net!feeder.erje.net!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail
From: Mark Andrews <marka@isc.org>
Newsgroups: comp.protocols.dns.bind
Subject: Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?
Date: Wed, 22 Jul 2020 09:28:37 +1000
Lines: 57
Approved: bind-users@lists.isc.org
Message-ID: <mailman.741.1595374086.942.bind-users@lists.isc.org>
References: <3E18C1A0C550C44DA156DA5DA8ECCC6AB60D2E7F@NICS-EXCH2.sbg.nic.at> <af8c0315-6128-5df0-0800-a2940ebcdbe7@thelounge.net> <3E18C1A0C550C44DA156DA5DA8ECCC6AB60D2F10@NICS-EXCH2.sbg.nic.at> <2b5f4d05-b1a8-760c-3082-43843ed486fe@thelounge.net> <3E18C1A0C550C44DA156DA5DA8ECCC6AB60D2FA1@NICS-EXCH2.sbg.nic.at> <6091f715-d145-ab3f-d09b-5ec502575873@thelounge.net> <BAE9894B-2918-425F-A956-A83F2DBF0EC0@isc.org> <d72122e9-bb51-7756-0298-4a667a78b346@thelounge.net> <3E18C1A0C550C44DA156DA5DA8ECCC6AB60D30C8@NICS-EXCH2.sbg.nic.at> <5F11E663.1060805@ipinc.net> <4641DBC7-ED26-40E3-9141-AE8A70846027@kreme.com> <CAGrdBBsmX-7Q1=vNxJciuOQSsQgRaRMV=ZyxGdoYFQNj6kVcPQ@mail.gmail.com> <58657E19-432C-4817-8E94-557955BAC0B2@kreme.com> <7495C42E-F6F6-4E8B-B465-FCC100DAA86A@isc.org> <EE57DA95-A8F3-4A01-8E45-CF2F4593C5AB@kreme.com> <70154332-4A06-4250-8291-1E3CCA9617A3@isc.org>
NNTP-Posting-Host: lists.isc.org
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.6\))
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Cc: bind-users <bind-users@lists.isc.org>
To: "@lbutlr" <kremels@kreme.com>
In-Reply-To: <EE57DA95-A8F3-4A01-8E45-CF2F4593C5AB@kreme.com>
Precedence: list
Xref: csiph.com comp.protocols.dns.bind:15999



> On 22 Jul 2020, at 08:23, @lbutlr <kremels@kreme.com> wrote:
>=20
> On 21 Jul 2020, at 06:37, Mark Andrews <marka@isc.org> wrote:
>> On 21 Jul 2020, at 18:23, @lbutlr <kremels@kreme.com> wrote:
>>>=20
>>> Bind is a poor choice for desktop use. Packages like unbound are =
much better for that sort of use, and it is fr less critical if those =
packages have security issues.
>>=20
>> Anything that talks to the net is critical path from a security =
perspective.
>=20
> There are different levels of critical, and unbound is a lot further =
down that list that bind.

I would beg to differ. =46rom an exposure perspective they are =
identical. They both ask questions onto the network and both have to =
parse and process those answers.  They both produce similar CVSS scores, =
which are a much more objective way of analysis the need to pay =
attention to a security issues.  BIND and UNBOUND both have had CVSS =
scores of 7.5
for packets of death.

A packet of death that does nothing else has a CVS 3.0 score of 7.5 =
(AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS, v3.0, a score of 0.0 receives a "None" rating; a 0.1-3.9 score =
gets a "Low" severity rating; a score of 4.0-6.9 is a "Medium" rating; =
score of 7.0-8.9 is a "High" rating; and a score of 9.0 - 10.0 is a =
"Critical" rating.

If it the fault leads to a potential remote compromise you get into the =
Critical range.

> --=20
> We are born naked, wet and hungry; then it's all downhill.
>=20
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to =
unsubscribe from this list
>=20
> ISC funds the development of this software with paid support =
subscriptions. Contact us at https://www.isc.org/contact/ for more =
information.
>=20
>=20
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

--=20
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org