BIND (Berkeley Internet Name Domain, previously: Berkeley Internet Name Daemon) is the most commonly used DNS server on the Internet, especially on Unix-like systems, where it is a de facto standard. Supported by Internet Systems Consortium, it was originally created by Paul Vixie in 1988 while working for DEC. Like Sendmail, FTP, and other systems dating back to the more laissez-faire earlier days of the Internet, BIND 4 and BIND 8 had a high number of security vulnerabilities over the years. A new version of BIND (BIND 9) was written from scratch in part to address the architecural difficulties with auditing the earlier BIND code bases, and also to support DNSSEC extensions. There are many alternative DNS implementations, including djbdns.

References

Vulnerabilities

• "CA-2002-31 Multiple Vulnerabilities in BIND (http://www.cert.org./advisories/CA-2002-31.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-2002-15 Denial-of-Service Vulnerability in ISC BIND 9 (http://www.cert.org./advisories/CA-2002-15.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-2001-02 Multiple Vulnerabilities in BIND (http://www.cert.org./advisories/CA-2001-02.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-2000-20 Multiple Denial-of-Service Problems in ISC BIND (http://www.cert.org./advisories/CA-2000-20.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-2000-03 Continuing Compromises of DNS servers (http://www.cert.org./advisories/CA-2000-03.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-1999-14 Multiple Vulnerabilities in BIND (http://www.cert.org./advisories/CA-1999-14.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-1998-05 Multiple Vulnerabilities in BIND (http://www.cert.org./advisories/CA-1998-05.html)." CERT Advisories. Accessed on January 7, 2005.
• "CA-1997-22 BIND - the Berkeley Internet Name Daemon (http://www.cert.org./advisories/CA-1997-22.html)." CERT Advisories. Accessed on January 7, 2005.

External links

• http://www.isc.org/products/BIND/ The official BIND site
• DNS & BIND Resources (http://www.bind9.net/)
• DNS Security Extensions (DNSSEC) (http://www.dnssec.net/)