medium4.3Public exploit code
CVE-2007-2926
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BIND 9 0.3beta - DNS Cache Poisoning2007-08-07 · remote · multiple · Verified
Impact
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isc | Bind | Versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5 |
References
- NVD record
- CVE.org record
- http://docs.info.apple.com/article.html?artnum=307041
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
- http://marc.info/?l=bugtraq&m=141879471518471&w=2
- http://secunia.com/advisories/26148
- http://secunia.com/advisories/26152
- http://secunia.com/advisories/26160
- http://secunia.com/advisories/26180
- http://secunia.com/advisories/26195
- http://secunia.com/advisories/26217
- http://secunia.com/advisories/26227
- http://secunia.com/advisories/26231
- http://secunia.com/advisories/26236
- http://secunia.com/advisories/26261
- http://secunia.com/advisories/26308
- http://secunia.com/advisories/26330
- http://secunia.com/advisories/26509
- http://secunia.com/advisories/26515
- http://secunia.com/advisories/26531
- http://secunia.com/advisories/26605
- http://secunia.com/advisories/26607
- http://secunia.com/advisories/26847
- http://secunia.com/advisories/26925