Nessus Plugin #10028

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Determine which version of BIND name daemon is running

Family:

General

Category:

infos

Copyright:

This script is Copyright (C) 1999 SecuriTeam

Summary:

Determine which version of BIND name daemon is running

Version:

$Revision: 1.22 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

BIND 'NAMED' is an open-source DNS server from ISC.org. Many proprietary
DNS servers are based on BIND source code.

The BIND based NAMED servers (or DNS servers) allow remote users
to query for version and type information. The query of the CHAOS
TXT record 'version.bind', will typically prompt the server to send
the information back to the querying source.


Solution :
Using the 'version' directive in the 'options' section will block
the 'version.bind' query, but it will not log such attempts.

Risk factor : Medium