The ntpd(8) daemon is an implementation of the Network Time Protocol (NTP) used to synchronize the time of a computer system to a reference time source.
Fleximus Blog
FreeBSD
FreeBSD security advisory 10-01: bind
Felix EhlersBIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet Domain Name Server.
DNS Security Extensions (DNSSEC) provides data integrity, origin authentication and authenticated denial of existence to resolvers.
Security
Critical PowerDNS Recursor Security Vulnerabilities
Felix EhlersThere are two major vulnerabilities which were recently discovered in the PowerDNS Recursor (all versions up to and including 3.1.7.1) which can lead to a full system compromise and/or cache poisoning.
Fleximus
Happy new year and welcome in 2010
Felix EhlersFleximus wishes everybody a happy new year! We hope that 2010 will be a great year, with lots of good and exciting stuff.
We want to improve our website and its content further. More frequent blog entries with quality of information. Also some nifty litle tools will hopefully attract more …
FreeBSD
FreeBSD rtld local root exploit
Felix EhlersKingcope discovered and posted on Full-disclosure that the Run-Time Link-Editor (rtld) in recent FreeBSD versions has a dangerous bug. An attacker can trick rtld to accept a manipulated LD_PRELOAD environment variable even when executing setugid binaries like "ping" or "su".