mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

References

lists.apple.com/archives/security-announce//2008/Sep/msg00002.html

secunia.com/advisories/31822

support.apple.com/kb/HT2990

www.securityfocus.com/bid/31093

www.securitytracker.com/id?1020844

www.vupen.com/english/advisories/2008/2524

nvd 6

prion 6

cve 7

seebug 6

nessus 37

openvas 69

slackware 3

debian 10

checkpoint_advisories 2

freebsd_advisory 1

osv 2

ubuntu 2

altlinux 5

securityvulns 8

exploitpack 3

f5 2

checkpoint_security 1

packetstorm 3

oraclelinux 2

centos 2

redhat 2

suse 1

gentoo 1

fedora 3

cvelist 5

debiancve 2

ubuntucve 4

freebsd 2

rubygems 1

cisco 1

nvd

CVE-2008-3630

2008-09-11 01:13:09

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-3905

2008-09-04 17:41:00

prion

Design/Logic Flaw

2008-09-11 01:13:00

Spoofing

2008-07-08 23:41:00

Code injection

2008-09-26 16:21:00

cve

CVE-2008-3630

2008-09-11 01:13:09

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-2739

2008-09-26 16:21:43

seebug

Apple Bonjour for Windows mDNSResponder伪造DNS应答漏洞

2008-09-11 00:00:00

BIND 9.4.1-9.4.2 - Remote DNS Cache Poisoning Flaw Exploit (meta)

2014-07-01 00:00:00

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)

2008-07-24 00:00:00

nessus

Debian DSA-1605-1 : glibc - DNS cache poisoning

2008-07-10 00:00:00

FreeBSD : ruby -- DNS spoofing vulnerability (959d384d-6b59-11dd-9d79-001fc61c2a55)

2008-08-17 00:00:00

openSUSE Security Update : bind (bind-82)

2009-07-21 00:00:00

openvas

Slackware Advisory SSA:2008-191-02 bind

2012-09-11 00:00:00

Oracle: Security Advisory (ELSA-2008-0533)

2015-10-08 00:00:00

Nmap NSE net: dns-random-srcport

2011-06-01 00:00:00

slackware

[slackware-security] bind

2008-07-10 04:29:01

[slackware-security] ruby

2008-11-29 21:37:03

[slackware-security] dnsmasq

2008-07-24 00:02:47

debian

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

2008-09-22 06:12:09

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

2008-09-22 06:12:09

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-27 09:36:54

checkpoint_advisories

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037) - High Confidence (CVE-2008-1447)

2013-05-09 00:00:00

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037; CVE-2008-1447)

2011-11-01 00:00:00

freebsd_advisory

FreeBSD-SA-08:06.bind

2008-07-13 00:00:00

osv

refpolicy - incompatible policy

2008-07-25 00:00:00

bind9 - cache poisoning

2008-07-08 00:00:00

ubuntu

Bind vulnerability

2008-07-08 00:00:00

Dnsmasq vulnerability

2008-07-22 00:00:00

altlinux

Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6

2008-08-12 00:00:00

Security fix for the ALT Linux 5 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 8 package bind version 9.3.5-alt2

2008-06-06 00:00:00

securityvulns

CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit

2008-07-25 00:00:00

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-29 00:00:00

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-12 00:00:00

exploitpack

BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)

2008-07-23 00:00:00

BIND 9.x - Remote DNS Cache Poisoning (Python)

2008-07-24 00:00:00

BIND 9.x - Remote DNS Cache Poisoning

2008-07-25 00:00:00

K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2013-03-19 00:00:00

SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2008-07-10 00:00:00

checkpoint_security

Check Point response to DNS poisoning vulnerability CVE-2008-1447

2008-07-05 21:00:00

packetstorm

bailiwicked_host.rb.txt

2008-07-24 00:00:00

bailiwicked_domain.rb.txt

2008-07-24 00:00:00

bind9x-poison.txt

2008-07-25 00:00:00

oraclelinux

bind security update

2008-07-08 00:00:00

dnsmasq security update

2008-08-11 00:00:00

centos

bind, caching, selinux security update

2008-07-08 22:25:27

bind security update

2008-07-09 01:20:56

redhat

(RHSA-2008:0789) Moderate: dnsmasq security update

2008-08-11 00:00:00

(RHSA-2008:0533) Important: bind security update

2008-07-08 00:00:00

suse

DNS cache poisoning in bind

2008-07-11 09:57:52

gentoo

BIND: Cache poisoning

2008-07-11 00:00:00

fedora

[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9

2009-02-14 22:11:22

[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9

2008-07-09 21:45:32

[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9

2009-01-15 02:51:25

cvelist

CVE-2008-1447

2008-07-08 23:00:00

CVE-2008-1454

2008-07-08 23:00:00

CVE-2008-2739

2008-09-26 16:00:00

debiancve

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-4099

2008-09-18 17:59:32

ubuntucve

CVE-2008-1447

2008-07-08 00:00:00

CVE-2008-4099

2008-09-18 00:00:00

CVE-2008-4100

2008-09-18 00:00:00

freebsd

FreeBSD -- DNS cache poisoning

2008-07-08 00:00:00

ruby -- DNS spoofing vulnerability

2008-08-08 00:00:00

rubygems

ruby -- DNS spoofing vulnerability in resolv.rb

2008-05-04 20:00:00

cisco

Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks

2008-07-08 18:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.5 Medium

AI Score

Confidence

High

0.133 Low

EPSS

Percentile

95.6%

JSON

Related for CVELIST:CVE-2008-3630