Lucene search

K
f5F5SOL8077
HistoryNov 05, 2007 - 12:00 a.m.

SOL8077 - BIND 8 vulnerability CVE-2007-2930

2007-11-0500:00:00
support.f5.com
21

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.021 Low

EPSS

Percentile

88.0%

The NSID_SHUFFLE_ONLY and NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors.

Information about this advisory is available at the following location:

<http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2930&gt;

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.021 Low

EPSS

Percentile

88.0%