Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4100HistorySep 18, 2008 - 5:59 p.m.
CVE-2008-4100
2008-09-1817:59:00
Debian Security Bug Tracker
security-tracker.debian.org
21
6.5 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.011 Low
EPSS
Percentile
83.9%
GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product’s intended role in a trusted environment.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | adns | < 1.4-2 | adns_1.4-2_all.deb |
| Debian | 11 | all | adns | < 1.4-2 | adns_1.4-2_all.deb |
| Debian | 10 | all | adns | < 1.4-2 | adns_1.4-2_all.deb |
| Debian | 999 | all | adns | < 1.4-2 | adns_1.4-2_all.deb |
| Debian | 13 | all | adns | < 1.4-2 | adns_1.4-2_all.deb |
Related
prion
prion
ubuntucve
ubuntucve
cve
cve
checkpoint_advisories
checkpoint_advisories
openvas
openvas
Slackware Advisory SSA:2008-334-01 ruby
2012-09-11 00:00:00
SLES9: Security update for bind
2009-10-10 00:00:00
Slackware Advisory SSA:2008-205-01 dnsmasq
2012-09-11 00:00:00
nessus
nessus
Ubuntu 8.04 LTS : dnsmasq vulnerability (USN-627-1)
2008-07-23 00:00:00
Scientific Linux Security Update : dnsmasq on SL5.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 5 : dnsmasq (ELSA-2008-0789)
2013-07-12 00:00:00
seebug
seebug
BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (py)
2008-07-24 00:00:00
BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (meta)
2008-07-24 00:00:00
BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (c)
2008-07-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package bind version 9.3.5-alt2
2008-06-06 00:00:00
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
2008-06-06 00:00:00
Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6
2008-08-12 00:00:00
exploitpack
exploitpack
BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
2008-07-23 00:00:00
BIND 9.x - Remote DNS Cache Poisoning (Python)
2008-07-24 00:00:00
BIND 9.x - Remote DNS Cache Poisoning
2008-07-25 00:00:00
f5
f5
K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2013-03-19 00:00:00
SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2008-07-10 00:00:00
debian
debian
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
2008-07-27 09:36:54
[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
2008-07-08 17:05:29
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
2008-07-27 09:36:54
packetstorm
packetstorm
bailiwicked_domain.rb.txt
2008-07-24 00:00:00
bind9x-poison.txt
2008-07-25 00:00:00
bailiwicked_host.rb.txt
2008-07-24 00:00:00
osv
osv
bind9 - cache poisoning
2008-07-08 00:00:00
refpolicy - incompatible policy
2008-07-25 00:00:00
suse
suse
DNS cache poisoning in bind
2008-07-11 09:57:52
redhat
redhat
(RHSA-2008:0789) Moderate: dnsmasq security update
2008-08-11 00:00:00
(RHSA-2008:0533) Important: bind security update
2008-07-08 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9
2009-02-14 22:11:22
[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9
2008-07-09 21:45:32
[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9
2009-01-15 02:51:25
gentoo
gentoo
BIND: Cache poisoning
2008-07-11 00:00:00
dnsmasq: Denial of Service and DNS spoofing
2008-09-04 00:00:00
debiancve
debiancve
CVE-2008-1447
2008-07-08 23:41:00
CVE-2008-4099
2008-09-18 17:59:00
securityvulns
securityvulns
CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
2008-07-25 00:00:00
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
2008-07-29 00:00:00
[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
2008-07-12 00:00:00
slackware
slackware
[slackware-security] ruby
2008-11-29 21:37:03
[slackware-security] dnsmasq
2008-07-24 00:02:47
[slackware-security] bind
2008-07-10 04:29:01
freebsd_advisory
freebsd_advisory
FreeBSD-SA-08:06.bind
2008-07-13 00:00:00
ubuntu
ubuntu
Bind vulnerability
2008-07-08 00:00:00
Dnsmasq vulnerability
2008-07-22 00:00:00
checkpoint_security
checkpoint_security
Check Point response to DNS poisoning vulnerability CVE-2008-1447
2008-07-05 21:00:00
oraclelinux
oraclelinux
bind security update
2008-07-08 00:00:00
dnsmasq security update
2008-08-11 00:00:00
centos
centos
bind, caching, selinux security update
2008-07-08 22:25:27
bind security update
2008-07-09 01:20:56
freebsd
freebsd
ruby -- DNS spoofing vulnerability
2008-08-08 00:00:00
FreeBSD -- DNS cache poisoning
2008-07-08 00:00:00
rubygems
rubygems
ruby -- DNS spoofing vulnerability in resolv.rb
2008-05-04 20:00:00
cisco
cisco
Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
2008-07-08 18:00:00
mskb
mskb
MS08-037: Vulnerabilities in DNS could allow spoofing
2018-04-17 19:03:20
6.5 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.011 Low
EPSS
Percentile
83.9%
Related for DEBIANCVE:CVE-2008-4100