Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2007-2926

Summary
Assigner-certcc
Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b
Published At-24 Jul, 2007 | 17:00
Updated At-07 Aug, 2024 | 13:57
Rejected At-
Credits

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:certcc
Assigner Org ID:37e5125f-f79b-445b-8fad-9564f167944b
Published At:24 Jul, 2007 | 17:00
Updated At:07 Aug, 2024 | 13:57
Rejected At:
▼CVE Numbering Authority (CNA)

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
x_refsource_CONFIRM
http://www.trusteer.com/docs/bind9dns_s.html
x_refsource_MISC
http://secunia.com/advisories/26231
third-party-advisory
x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2932
vdb-entry
x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=141879471518471&w=2
vendor-advisory
x_refsource_HP
http://secunia.com/advisories/26847
third-party-advisory
x_refsource_SECUNIA
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
vendor-advisory
x_refsource_AIXAPAR
http://www.vupen.com/english/advisories/2007/2914
vdb-entry
x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2007-0740.html
vendor-advisory
x_refsource_REDHAT
http://secunia.com/advisories/26217
third-party-advisory
x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=141879471518471&w=2
vendor-advisory
x_refsource_HP
http://secunia.com/advisories/26509
third-party-advisory
x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
vendor-advisory
x_refsource_HP
http://www.securityfocus.com/bid/26444
vdb-entry
x_refsource_BID
http://www.securiteam.com/securitynews/5VP0L0UM0A.html
x_refsource_MISC
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
vendor-advisory
x_refsource_HP
http://secunia.com/advisories/26605
third-party-advisory
x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
vendor-advisory
x_refsource_SUNALERT
http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
vendor-advisory
x_refsource_MANDRIVA
http://secunia.com/advisories/26607
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474856/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://secunia.com/advisories/26148
third-party-advisory
x_refsource_SECUNIA
http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
vendor-advisory
x_refsource_FREEBSD
http://www.kb.cert.org/vuls/id/252735
third-party-advisory
x_refsource_CERT-VN
http://www.trusteer.com/docs/bind9dns.html
x_refsource_MISC
http://secunia.com/advisories/26180
third-party-advisory
x_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
vendor-advisory
x_refsource_GENTOO
http://secunia.com/advisories/26152
third-party-advisory
x_refsource_SECUNIA
http://www.trustix.org/errata/2007/0023/
vendor-advisory
x_refsource_TRUSTIX
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
x_refsource_CONFIRM
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
vendor-advisory
x_refsource_SLACKWARE
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
vendor-advisory
x_refsource_APPLE
http://docs.info.apple.com/article.html?artnum=307041
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/474516/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.isc.org/index.pl?/sw/bind/bind-security.php
x_refsource_CONFIRM
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
vendor-advisory
x_refsource_AIXAPAR
https://exchange.xforce.ibmcloud.com/vulnerabilities/35575
vdb-entry
x_refsource_XF
http://www.vupen.com/english/advisories/2007/2782
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/26227
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/26261
third-party-advisory
x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/3868
vdb-entry
x_refsource_VUPEN
http://www.securityfocus.com/bid/25037
vdb-entry
x_refsource_BID
http://secunia.com/advisories/26515
third-party-advisory
x_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-491-1
vendor-advisory
x_refsource_UBUNTU
http://secunia.com/advisories/26330
third-party-advisory
x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1587
x_refsource_CONFIRM
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
vendor-advisory
x_refsource_HP
http://www.securitytracker.com/id?1018442
vdb-entry
x_refsource_SECTRACK
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
vendor-advisory
x_refsource_SGI
http://www.debian.org/security/2007/dsa-1341
vendor-advisory
x_refsource_DEBIAN
http://secunia.com/advisories/26308
third-party-advisory
x_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2007_47_bind.html
vendor-advisory
x_refsource_SUSE
http://www.vupen.com/english/advisories/2007/2627
vdb-entry
x_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226
vdb-entry
signature
x_refsource_OVAL
http://secunia.com/advisories/27643
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/26236
third-party-advisory
x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2662
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/26195
third-party-advisory
x_refsource_SECUNIA
ftp://aix.software.ibm.com/aix/efixes/security/README
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/3242
vdb-entry
x_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293
vdb-entry
signature
x_refsource_OVAL
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
vendor-advisory
x_refsource_OPENPKG
http://www.us-cert.gov/cas/techalerts/TA07-319A.html
third-party-advisory
x_refsource_CERT
http://secunia.com/advisories/26925
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/26160
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474545/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
vendor-advisory
x_refsource_HP
http://www.securityfocus.com/archive/1/474808/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://secunia.com/advisories/26531
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.trusteer.com/docs/bind9dns_s.html
Resource:
x_refsource_MISC
Hyperlink: http://secunia.com/advisories/26231
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.vupen.com/english/advisories/2007/2932
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://marc.info/?l=bugtraq&m=141879471518471&w=2
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://secunia.com/advisories/26847
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
Resource:
vendor-advisory
x_refsource_AIXAPAR
Hyperlink: http://www.vupen.com/english/advisories/2007/2914
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0740.html
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: http://secunia.com/advisories/26217
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://marc.info/?l=bugtraq&m=141879471518471&w=2
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://secunia.com/advisories/26509
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://www.securityfocus.com/bid/26444
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://www.securiteam.com/securitynews/5VP0L0UM0A.html
Resource:
x_refsource_MISC
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://secunia.com/advisories/26605
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
Resource:
vendor-advisory
x_refsource_SUNALERT
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
Resource:
vendor-advisory
x_refsource_MANDRIVA
Hyperlink: http://secunia.com/advisories/26607
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.securityfocus.com/archive/1/474856/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://secunia.com/advisories/26148
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
Resource:
vendor-advisory
x_refsource_FREEBSD
Hyperlink: http://www.kb.cert.org/vuls/id/252735
Resource:
third-party-advisory
x_refsource_CERT-VN
Hyperlink: http://www.trusteer.com/docs/bind9dns.html
Resource:
x_refsource_MISC
Hyperlink: http://secunia.com/advisories/26180
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
Resource:
vendor-advisory
x_refsource_GENTOO
Hyperlink: http://secunia.com/advisories/26152
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.trustix.org/errata/2007/0023/
Resource:
vendor-advisory
x_refsource_TRUSTIX
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
Resource:
vendor-advisory
x_refsource_SLACKWARE
Hyperlink: http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
Resource:
vendor-advisory
x_refsource_APPLE
Hyperlink: http://docs.info.apple.com/article.html?artnum=307041
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.securityfocus.com/archive/1/474516/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind-security.php
Resource:
x_refsource_CONFIRM
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
Resource:
vendor-advisory
x_refsource_AIXAPAR
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/35575
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://www.vupen.com/english/advisories/2007/2782
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://secunia.com/advisories/26227
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://secunia.com/advisories/26261
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.vupen.com/english/advisories/2007/3868
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://www.securityfocus.com/bid/25037
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://secunia.com/advisories/26515
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.ubuntu.com/usn/usn-491-1
Resource:
vendor-advisory
x_refsource_UBUNTU
Hyperlink: http://secunia.com/advisories/26330
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: https://issues.rpath.com/browse/RPL-1587
Resource:
x_refsource_CONFIRM
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://www.securitytracker.com/id?1018442
Resource:
vdb-entry
x_refsource_SECTRACK
Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
Resource:
vendor-advisory
x_refsource_SGI
Hyperlink: http://www.debian.org/security/2007/dsa-1341
Resource:
vendor-advisory
x_refsource_DEBIAN
Hyperlink: http://secunia.com/advisories/26308
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.novell.com/linux/security/advisories/2007_47_bind.html
Resource:
vendor-advisory
x_refsource_SUSE
Hyperlink: http://www.vupen.com/english/advisories/2007/2627
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226
Resource:
vdb-entry
signature
x_refsource_OVAL
Hyperlink: http://secunia.com/advisories/27643
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://secunia.com/advisories/26236
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.vupen.com/english/advisories/2007/2662
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://secunia.com/advisories/26195
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: ftp://aix.software.ibm.com/aix/efixes/security/README
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.vupen.com/english/advisories/2007/3242
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293
Resource:
vdb-entry
signature
x_refsource_OVAL
Hyperlink: http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
Resource:
vendor-advisory
x_refsource_OPENPKG
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-319A.html
Resource:
third-party-advisory
x_refsource_CERT
Hyperlink: http://secunia.com/advisories/26925
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://secunia.com/advisories/26160
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.securityfocus.com/archive/1/474545/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://www.securityfocus.com/archive/1/474808/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://secunia.com/advisories/26531
Resource:
third-party-advisory
x_refsource_SECUNIA
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
x_refsource_CONFIRM
x_transferred
http://www.trusteer.com/docs/bind9dns_s.html
x_refsource_MISC
x_transferred
http://secunia.com/advisories/26231
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.vupen.com/english/advisories/2007/2932
vdb-entry
x_refsource_VUPEN
x_transferred
http://marc.info/?l=bugtraq&m=141879471518471&w=2
vendor-advisory
x_refsource_HP
x_transferred
http://secunia.com/advisories/26847
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
vendor-advisory
x_refsource_AIXAPAR
x_transferred
http://www.vupen.com/english/advisories/2007/2914
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0740.html
vendor-advisory
x_refsource_REDHAT
x_transferred
http://secunia.com/advisories/26217
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://marc.info/?l=bugtraq&m=141879471518471&w=2
vendor-advisory
x_refsource_HP
x_transferred
http://secunia.com/advisories/26509
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
vendor-advisory
x_refsource_HP
x_transferred
http://www.securityfocus.com/bid/26444
vdb-entry
x_refsource_BID
x_transferred
http://www.securiteam.com/securitynews/5VP0L0UM0A.html
x_refsource_MISC
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
vendor-advisory
x_refsource_HP
x_transferred
http://secunia.com/advisories/26605
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
vendor-advisory
x_refsource_SUNALERT
x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
vendor-advisory
x_refsource_MANDRIVA
x_transferred
http://secunia.com/advisories/26607
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/archive/1/474856/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://secunia.com/advisories/26148
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
vendor-advisory
x_refsource_FREEBSD
x_transferred
http://www.kb.cert.org/vuls/id/252735
third-party-advisory
x_refsource_CERT-VN
x_transferred
http://www.trusteer.com/docs/bind9dns.html
x_refsource_MISC
x_transferred
http://secunia.com/advisories/26180
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
vendor-advisory
x_refsource_GENTOO
x_transferred
http://secunia.com/advisories/26152
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.trustix.org/errata/2007/0023/
vendor-advisory
x_refsource_TRUSTIX
x_transferred
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
x_refsource_CONFIRM
x_transferred
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
vendor-advisory
x_refsource_SLACKWARE
x_transferred
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
vendor-advisory
x_refsource_APPLE
x_transferred
http://docs.info.apple.com/article.html?artnum=307041
x_refsource_CONFIRM
x_transferred
http://www.securityfocus.com/archive/1/474516/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.isc.org/index.pl?/sw/bind/bind-security.php
x_refsource_CONFIRM
x_transferred
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
vendor-advisory
x_refsource_AIXAPAR
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/35575
vdb-entry
x_refsource_XF
x_transferred
http://www.vupen.com/english/advisories/2007/2782
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/26227
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/26261
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.vupen.com/english/advisories/2007/3868
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.securityfocus.com/bid/25037
vdb-entry
x_refsource_BID
x_transferred
http://secunia.com/advisories/26515
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.ubuntu.com/usn/usn-491-1
vendor-advisory
x_refsource_UBUNTU
x_transferred
http://secunia.com/advisories/26330
third-party-advisory
x_refsource_SECUNIA
x_transferred
https://issues.rpath.com/browse/RPL-1587
x_refsource_CONFIRM
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
vendor-advisory
x_refsource_HP
x_transferred
http://www.securitytracker.com/id?1018442
vdb-entry
x_refsource_SECTRACK
x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
vendor-advisory
x_refsource_SGI
x_transferred
http://www.debian.org/security/2007/dsa-1341
vendor-advisory
x_refsource_DEBIAN
x_transferred
http://secunia.com/advisories/26308
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.novell.com/linux/security/advisories/2007_47_bind.html
vendor-advisory
x_refsource_SUSE
x_transferred
http://www.vupen.com/english/advisories/2007/2627
vdb-entry
x_refsource_VUPEN
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226
vdb-entry
signature
x_refsource_OVAL
x_transferred
http://secunia.com/advisories/27643
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/26236
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.vupen.com/english/advisories/2007/2662
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/26195
third-party-advisory
x_refsource_SECUNIA
x_transferred
ftp://aix.software.ibm.com/aix/efixes/security/README
x_refsource_CONFIRM
x_transferred
http://www.vupen.com/english/advisories/2007/3242
vdb-entry
x_refsource_VUPEN
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293
vdb-entry
signature
x_refsource_OVAL
x_transferred
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
vendor-advisory
x_refsource_OPENPKG
x_transferred
http://www.us-cert.gov/cas/techalerts/TA07-319A.html
third-party-advisory
x_refsource_CERT
x_transferred
http://secunia.com/advisories/26925
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/26160
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/archive/1/474545/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
vendor-advisory
x_refsource_HP
x_transferred
http://www.securityfocus.com/archive/1/474808/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://secunia.com/advisories/26531
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.trusteer.com/docs/bind9dns_s.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://secunia.com/advisories/26231
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/2932
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://marc.info/?l=bugtraq&m=141879471518471&w=2
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://secunia.com/advisories/26847
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
Resource:
vendor-advisory
x_refsource_AIXAPAR
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/2914
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0740.html
Resource:
vendor-advisory
x_refsource_REDHAT
x_transferred
Hyperlink: http://secunia.com/advisories/26217
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://marc.info/?l=bugtraq&m=141879471518471&w=2
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://secunia.com/advisories/26509
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://www.securityfocus.com/bid/26444
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://www.securiteam.com/securitynews/5VP0L0UM0A.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://secunia.com/advisories/26605
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
Resource:
vendor-advisory
x_refsource_SUNALERT
x_transferred
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
Resource:
vendor-advisory
x_refsource_MANDRIVA
x_transferred
Hyperlink: http://secunia.com/advisories/26607
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/474856/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://secunia.com/advisories/26148
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
Resource:
vendor-advisory
x_refsource_FREEBSD
x_transferred
Hyperlink: http://www.kb.cert.org/vuls/id/252735
Resource:
third-party-advisory
x_refsource_CERT-VN
x_transferred
Hyperlink: http://www.trusteer.com/docs/bind9dns.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://secunia.com/advisories/26180
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
Resource:
vendor-advisory
x_refsource_GENTOO
x_transferred
Hyperlink: http://secunia.com/advisories/26152
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.trustix.org/errata/2007/0023/
Resource:
vendor-advisory
x_refsource_TRUSTIX
x_transferred
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
Resource:
vendor-advisory
x_refsource_SLACKWARE
x_transferred
Hyperlink: http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
Resource:
vendor-advisory
x_refsource_APPLE
x_transferred
Hyperlink: http://docs.info.apple.com/article.html?artnum=307041
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/474516/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind-security.php
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
Resource:
vendor-advisory
x_refsource_AIXAPAR
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/35575
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/2782
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://secunia.com/advisories/26227
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://secunia.com/advisories/26261
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/3868
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://www.securityfocus.com/bid/25037
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://secunia.com/advisories/26515
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.ubuntu.com/usn/usn-491-1
Resource:
vendor-advisory
x_refsource_UBUNTU
x_transferred
Hyperlink: http://secunia.com/advisories/26330
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: https://issues.rpath.com/browse/RPL-1587
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://www.securitytracker.com/id?1018442
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
Resource:
vendor-advisory
x_refsource_SGI
x_transferred
Hyperlink: http://www.debian.org/security/2007/dsa-1341
Resource:
vendor-advisory
x_refsource_DEBIAN
x_transferred
Hyperlink: http://secunia.com/advisories/26308
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.novell.com/linux/security/advisories/2007_47_bind.html
Resource:
vendor-advisory
x_refsource_SUSE
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/2627
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: http://secunia.com/advisories/27643
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://secunia.com/advisories/26236
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/2662
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://secunia.com/advisories/26195
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: ftp://aix.software.ibm.com/aix/efixes/security/README
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2007/3242
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
Resource:
vendor-advisory
x_refsource_OPENPKG
x_transferred
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-319A.html
Resource:
third-party-advisory
x_refsource_CERT
x_transferred
Hyperlink: http://secunia.com/advisories/26925
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://secunia.com/advisories/26160
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/474545/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/474808/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://secunia.com/advisories/26531
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cret@cert.org
Published At:24 Jul, 2007 | 17:30
Updated At:30 Oct, 2018 | 16:27

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
Internet Systems Consortium, Inc.
isc
>>bind>>9.0
cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1
cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2
cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.3
cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.4
cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.5
cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.5.0
cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
Organization : Red Hat
Last Modified : 2008-03-28T00:00:00

Updates are available for Red Hat Enterprise Linux 2.1, 3, 4, and 5 to correct this issue: http://rhn.redhat.com/errata/RHSA-2007-0740.html

References
HyperlinkSourceResource
ftp://aix.software.ibm.com/aix/efixes/security/READMEcret@cert.org
N/A
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asccret@cert.org
N/A
http://docs.info.apple.com/article.html?artnum=307041cret@cert.org
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426cret@cert.org
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600cret@cert.org
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368cret@cert.org
N/A
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.htmlcret@cert.org
N/A
http://marc.info/?l=bugtraq&m=141879471518471&w=2cret@cert.org
N/A
http://secunia.com/advisories/26148cret@cert.org
N/A
http://secunia.com/advisories/26152cret@cert.org
Vendor Advisory
http://secunia.com/advisories/26160cret@cert.org
N/A
http://secunia.com/advisories/26180cret@cert.org
N/A
http://secunia.com/advisories/26195cret@cert.org
N/A
http://secunia.com/advisories/26217cret@cert.org
N/A
http://secunia.com/advisories/26227cret@cert.org
N/A
http://secunia.com/advisories/26231cret@cert.org
N/A
http://secunia.com/advisories/26236cret@cert.org
N/A
http://secunia.com/advisories/26261cret@cert.org
N/A
http://secunia.com/advisories/26308cret@cert.org
N/A
http://secunia.com/advisories/26330cret@cert.org
N/A
http://secunia.com/advisories/26509cret@cert.org
N/A
http://secunia.com/advisories/26515cret@cert.org
N/A
http://secunia.com/advisories/26531cret@cert.org
N/A
http://secunia.com/advisories/26605cret@cert.org
N/A
http://secunia.com/advisories/26607cret@cert.org
N/A
http://secunia.com/advisories/26847cret@cert.org
N/A
http://secunia.com/advisories/26925cret@cert.org
N/A
http://secunia.com/advisories/27643cret@cert.org
N/A
http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asccret@cert.org
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1cret@cert.org
N/A
http://support.avaya.com/elmodocs2/security/ASA-2007-389.htmcret@cert.org
N/A
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903cret@cert.org
N/A
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=onlycret@cert.org
N/A
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=onlycret@cert.org
N/A
http://www.debian.org/security/2007/dsa-1341cret@cert.org
N/A
http://www.gentoo.org/security/en/glsa/glsa-200708-13.xmlcret@cert.org
N/A
http://www.isc.org/index.pl?/sw/bind/bind-security.phpcret@cert.org
N/A
http://www.kb.cert.org/vuls/id/252735cret@cert.org
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:149cret@cert.org
N/A
http://www.novell.com/linux/security/advisories/2007_47_bind.htmlcret@cert.org
N/A
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.htmlcret@cert.org
N/A
http://www.redhat.com/support/errata/RHSA-2007-0740.htmlcret@cert.org
N/A
http://www.securiteam.com/securitynews/5VP0L0UM0A.htmlcret@cert.org
N/A
http://www.securityfocus.com/archive/1/474516/100/0/threadedcret@cert.org
N/A
http://www.securityfocus.com/archive/1/474545/100/0/threadedcret@cert.org
N/A
http://www.securityfocus.com/archive/1/474808/100/0/threadedcret@cert.org
N/A
http://www.securityfocus.com/archive/1/474856/100/0/threadedcret@cert.org
N/A
http://www.securityfocus.com/bid/25037cret@cert.org
N/A
http://www.securityfocus.com/bid/26444cret@cert.org
N/A
http://www.securitytracker.com/id?1018442cret@cert.org
N/A
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385cret@cert.org
N/A
http://www.trusteer.com/docs/bind9dns.htmlcret@cert.org
N/A
http://www.trusteer.com/docs/bind9dns_s.htmlcret@cert.org
N/A
http://www.trustix.org/errata/2007/0023/cret@cert.org
N/A
http://www.ubuntu.com/usn/usn-491-1cret@cert.org
N/A
http://www.us-cert.gov/cas/techalerts/TA07-319A.htmlcret@cert.org
US Government Resource
http://www.vupen.com/english/advisories/2007/2627cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/2662cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/2782cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/2914cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/2932cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/3242cret@cert.org
N/A
http://www.vupen.com/english/advisories/2007/3868cret@cert.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35575cret@cert.org
N/A
https://issues.rpath.com/browse/RPL-1587cret@cert.org
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293cret@cert.org
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226cret@cert.org
N/A
Hyperlink: ftp://aix.software.ibm.com/aix/efixes/security/README
Source: cret@cert.org
Resource: N/A
Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
Source: cret@cert.org
Resource: N/A
Hyperlink: http://docs.info.apple.com/article.html?artnum=307041
Source: cret@cert.org
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
Source: cret@cert.org
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
Source: cret@cert.org
Resource: N/A
Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
Source: cret@cert.org
Resource: N/A
Hyperlink: http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=141879471518471&w=2
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26148
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26152
Source: cret@cert.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/26160
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26180
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26195
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26217
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26227
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26231
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26236
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26261
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26308
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26330
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26509
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26515
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26531
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26605
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26607
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26847
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/26925
Source: cret@cert.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/27643
Source: cret@cert.org
Resource: N/A
Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
Source: cret@cert.org
Resource: N/A
Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
Source: cret@cert.org
Resource: N/A
Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
Source: cret@cert.org
Resource: N/A
Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.debian.org/security/2007/dsa-1341
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind-security.php
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.kb.cert.org/vuls/id/252735
Source: cret@cert.org
Resource:
US Government Resource
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.novell.com/linux/security/advisories/2007_47_bind.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0740.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securiteam.com/securitynews/5VP0L0UM0A.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/474516/100/0/threaded
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/474545/100/0/threaded
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/474808/100/0/threaded
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/474856/100/0/threaded
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/25037
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/26444
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1018442
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.trusteer.com/docs/bind9dns.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.trusteer.com/docs/bind9dns_s.html
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.trustix.org/errata/2007/0023/
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/usn-491-1
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA07-319A.html
Source: cret@cert.org
Resource:
US Government Resource
Hyperlink: http://www.vupen.com/english/advisories/2007/2627
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2662
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2782
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2914
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/2932
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/3242
Source: cret@cert.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2007/3868
Source: cret@cert.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/35575
Source: cret@cert.org
Resource: N/A
Hyperlink: https://issues.rpath.com/browse/RPL-1587
Source: cret@cert.org
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293
Source: cret@cert.org
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226
Source: cret@cert.org
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

4Records found
CVE-2010-0097
Matching Score-8
Assigner-CERT/CC
ShareView Details
Matching Score-8
Assigner-CERT/CC
CVSS Score-4.3||MEDIUM
EPSS-2.82% / 85.58%
||
7 Day CHG~0.00%
Published-22 Jan, 2010 | 21:20
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.

Action-Not Available
Vendor-n/aInternet Systems Consortium, Inc.
Product-bindn/a
CWE ID-CWE-20
Improper Input Validation
CVE-2007-2930
Matching Score-8
Assigner-CERT/CC
ShareView Details
Matching Score-8
Assigner-CERT/CC
CVSS Score-4.3||MEDIUM
EPSS-16.75% / 94.67%
||
7 Day CHG-1.89%
Published-12 Sep, 2007 | 01:00
Updated-07 Aug, 2024 | 13:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

Action-Not Available
Vendor-n/aInternet Systems Consortium, Inc.
Product-bindn/a
CVE-2017-3143
Matching Score-8
Assigner-Internet Systems Consortium (ISC)
ShareView Details
Matching Score-8
Assigner-Internet Systems Consortium (ISC)
CVSS Score-7.5||HIGH
EPSS-23.88% / 95.80%
||
7 Day CHG~0.00%
Published-16 Jan, 2019 | 20:00
Updated-16 Sep, 2024 | 16:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
An error in TSIG authentication can permit unauthorized dynamic updates

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

Action-Not Available
Vendor-Debian GNU/LinuxRed Hat, Inc.Internet Systems Consortium, Inc.
Product-enterprise_linux_serverdebian_linuxenterprise_linux_server_eusenterprise_linux_server_ausenterprise_linux_workstationbindenterprise_linux_server_tusenterprise_linux_desktopBIND 9
CVE-2003-0914
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-4.3||MEDIUM
EPSS-26.75% / 96.16%
||
7 Day CHG~0.00%
Published-02 Dec, 2003 | 05:00
Updated-03 Apr, 2025 | 01:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Action-Not Available
Vendor-nixucompaqscon/aNetBSDIBM CorporationFreeBSD FoundationInternet Systems Consortium, Inc.Sun Microsystems (Oracle Corporation)HP Inc.
Product-tru64hp-uxnetbsdbindnamesurferaixsolarisunixwaresunosfreebsdn/a
Details not found