ByteOS Network

Vulnerability Details :

CVE-2007-2930

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-12 Sep, 2007 | 01:00

Updated At-07 Aug, 2024 | 13:57

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:certcc

Assigner Org ID:37e5125f-f79b-445b-8fad-9564f167944b

Published At:12 Sep, 2007 | 01:00

Updated At:07 Aug, 2024 | 13:57

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm	x_refsource_CONFIRM
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1	vendor-advisory x_refsource_SUNALERT
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/3936	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/27433	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/481424/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2007/3192	vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/2991	vdb-entry x_refsource_VUPEN
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837	vendor-advisory x_refsource_HP
http://secunia.com/advisories/26629	third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1018615	vdb-entry x_refsource_SECTRACK
http://www.trusteer.com/docs/bind8dns.html	x_refsource_MISC
http://secunia.com/advisories/27459	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/25459	vdb-entry x_refsource_BID
http://www.vupen.com/english/advisories/2007/3668	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/27696	third-party-advisory x_refsource_SECUNIA
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/477870/100/100/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/27465	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/3639	vdb-entry x_refsource_VUPEN
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf	x_refsource_CONFIRM
http://secunia.com/advisories/26858	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154	vdb-entry signature x_refsource_OVAL
http://www.kb.cert.org/vuls/id/927905	third-party-advisory x_refsource_CERT-VN
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1	vendor-advisory x_refsource_SUNALERT
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837	vendor-advisory x_refsource_HP
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975	x_refsource_CONFIRM
http://www.ciac.org/ciac/bulletins/r-333.shtml	third-party-advisory government-resource x_refsource_CIAC
http://www.securityfocus.com/archive/1/481659/100/0/threaded	mailing-list x_refsource_BUGTRAQ

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm

Resource:

x_refsource_CONFIRM

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1

Resource:

vendor-advisory

x_refsource_SUNALERT

Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2007/3936

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/27433

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/481424/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.vupen.com/english/advisories/2007/3192

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2007/2991

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://secunia.com/advisories/26629

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securitytracker.com/id?1018615

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.trusteer.com/docs/bind8dns.html

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/27459

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/25459

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.vupen.com/english/advisories/2007/3668

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/27696

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/archive/1/477870/100/100/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/27465

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2007/3639

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/26858

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.kb.cert.org/vuls/id/927905

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1

Resource:

vendor-advisory

x_refsource_SUNALERT

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ciac.org/ciac/bulletins/r-333.shtml

Resource:

third-party-advisory

government-resource

x_refsource_CIAC

Hyperlink: http://www.securityfocus.com/archive/1/481659/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm	x_refsource_CONFIRM x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2007/3936	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/27433	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/481424/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.vupen.com/english/advisories/2007/3192	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2007/2991	vdb-entry x_refsource_VUPEN x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837	vendor-advisory x_refsource_HP x_transferred
http://secunia.com/advisories/26629	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securitytracker.com/id?1018615	vdb-entry x_refsource_SECTRACK x_transferred
http://www.trusteer.com/docs/bind8dns.html	x_refsource_MISC x_transferred
http://secunia.com/advisories/27459	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/25459	vdb-entry x_refsource_BID x_transferred
http://www.vupen.com/english/advisories/2007/3668	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/27696	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/archive/1/477870/100/100/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/27465	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2007/3639	vdb-entry x_refsource_VUPEN x_transferred
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/26858	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154	vdb-entry signature x_refsource_OVAL x_transferred
http://www.kb.cert.org/vuls/id/927905	third-party-advisory x_refsource_CERT-VN x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837	vendor-advisory x_refsource_HP x_transferred
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975	x_refsource_CONFIRM x_transferred
http://www.ciac.org/ciac/bulletins/r-333.shtml	third-party-advisory government-resource x_refsource_CIAC x_transferred
http://www.securityfocus.com/archive/1/481659/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3936

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/27433

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/481424/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3192

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/2991

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://secunia.com/advisories/26629

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securitytracker.com/id?1018615

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.trusteer.com/docs/bind8dns.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://secunia.com/advisories/27459

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/25459

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3668

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/27696

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/477870/100/100/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/27465

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3639

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/26858

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/927905

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ciac.org/ciac/bulletins/r-333.shtml

Resource:

third-party-advisory

government-resource

x_refsource_CIAC

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/481659/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cret@cert.org

Published At:12 Sep, 2007 | 01:17

Updated At:16 Oct, 2018 | 16:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

Internet Systems Consortium, Inc.

>>bind>>Versions up to 8.4.7(inclusive)

cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2007-09-12T00:00:00

Not vulnerable. This issue did not affect the versions of bind as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837	cret@cert.org	N/A
http://secunia.com/advisories/26629	cret@cert.org	N/A
http://secunia.com/advisories/26858	cret@cert.org	N/A
http://secunia.com/advisories/27433	cret@cert.org	N/A
http://secunia.com/advisories/27459	cret@cert.org	N/A
http://secunia.com/advisories/27465	cret@cert.org	N/A
http://secunia.com/advisories/27696	cret@cert.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1	cret@cert.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1	cret@cert.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm	cret@cert.org	N/A
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968	cret@cert.org	N/A
http://www.ciac.org/ciac/bulletins/r-333.shtml	cret@cert.org	Patch
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php	cret@cert.org	Patch
http://www.kb.cert.org/vuls/id/927905	cret@cert.org	Patch US Government Resource
http://www.securityfocus.com/archive/1/477870/100/100/threaded	cret@cert.org	N/A
http://www.securityfocus.com/archive/1/481424/100/0/threaded	cret@cert.org	N/A
http://www.securityfocus.com/archive/1/481659/100/0/threaded	cret@cert.org	N/A
http://www.securityfocus.com/bid/25459	cret@cert.org	N/A
http://www.securitytracker.com/id?1018615	cret@cert.org	N/A
http://www.trusteer.com/docs/bind8dns.html	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2007/2991	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2007/3192	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2007/3639	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2007/3668	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2007/3936	cret@cert.org	N/A
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf	cret@cert.org	N/A
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975	cret@cert.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154	cret@cert.org	N/A

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/26629

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/26858

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27433

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27459

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27465

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27696

Source: cret@cert.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1

Source: cret@cert.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1

Source: cret@cert.org

Resource: N/A

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm

Source: cret@cert.org

Resource: N/A

Hyperlink: http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.ciac.org/ciac/bulletins/r-333.shtml

Source: cret@cert.org

Resource:

Patch

Hyperlink: http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

Source: cret@cert.org

Resource:

Patch

Hyperlink: http://www.kb.cert.org/vuls/id/927905

Source: cret@cert.org

Resource:

Patch

US Government Resource

Hyperlink: http://www.securityfocus.com/archive/1/477870/100/100/threaded

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/481424/100/0/threaded

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/481659/100/0/threaded

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/25459

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1018615

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.trusteer.com/docs/bind8dns.html

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/2991

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3192

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3639

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3668

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3936

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975

Source: cret@cert.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154

Source: cret@cert.org

Resource: N/A

Similar CVEs

4Records found

CVE-2017-3143

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

View Details

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

CVSS Score-7.5||HIGH

EPSS-23.88% / 95.80%

7 Day CHG~0.00%

Published-16 Jan, 2019 | 20:00

Updated-16 Sep, 2024 | 16:14

An error in TSIG authentication can permit unauthorized dynamic updates

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

Vendor-Debian GNU/Linux Red Hat, Inc.Internet Systems Consortium, Inc.

Product-enterprise_linux_server debian_linux enterprise_linux_server_eus enterprise_linux_server_aus enterprise_linux_workstation bind enterprise_linux_server_tus enterprise_linux_desktop BIND 9

CVE-2003-0914

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-26.75% / 96.16%

7 Day CHG~0.00%

Published-02 Dec, 2003 | 05:00

Updated-03 Apr, 2025 | 01:03

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

CVE-2010-0097

Matching Score-8

Assigner-CERT/CC

View Details

Matching Score-8

Assigner-CERT/CC

CVSS Score-4.3||MEDIUM

EPSS-2.82% / 85.59%

7 Day CHG~0.00%

Published-22 Jan, 2010 | 21:20

Updated-11 Apr, 2025 | 00:51

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.

Vendor-n/a Internet Systems Consortium, Inc.

Product-bind n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2007-2926

Matching Score-8

Assigner-CERT/CC

View Details

Matching Score-8

Assigner-CERT/CC

CVSS Score-4.3||MEDIUM

EPSS-15.04% / 94.30%

7 Day CHG~0.00%

Published-24 Jul, 2007 | 17:00

Updated-07 Aug, 2024 | 13:57

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Vendor-n/a Internet Systems Consortium, Inc.

Product-bind n/a

CVE-2007-2930

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs