FreeBSD Security Advisory – BIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet Domain Name Server. DNS Security Extensions (DNSSEC) provides data integrity, origin authentication and authenticated denial of existence to resolvers. If a client requests DNSSEC records with the Checking Disabled (CD) flag set, BIND may cache the unvalidated responses. These responses may later be returned to another client that has not set the CD flag.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/84912/FreeBSD-SA-10-01.bind.txt
Source: https://packetstormsecurity.com/files/84912/FreeBSD-Security-Advisory-BIND-named-Cache-Poisoning.html