Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-2930
HistorySep 12, 2007 - 1:17 a.m.

CVE-2007-2930

2007-09-1201:17:00
[email protected]
web.nvd.nist.gov
2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.218 Low

EPSS

Percentile

96.5%

JSON

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

Affected configurations

NVD
Node
iscbindRange≤8.4.7

References

Related

ubuntucve 2
prion 3
cve 3
redhatcve 1
cvelist 2
oraclelinux 1
nessus 67
cert 2
openvas 33
debian 2
altlinux 4
nvd 2
securityvulns 1
freebsd 1
suse 1
fedora 4
checkpoint_advisories 2
freebsd_advisory 1
centos 2
debiancve 1
osv 1
ubuntu 1
redhat 1
veracode 1
f5 2
slackware 1
gentoo 1
ubuntucve
ubuntucve
CVE-2007-2930
2007-09-12 00:00:00
CVE-2007-2926
2007-07-24 00:00:00
prion
prion
Code injection
2007-09-12 01:17:00
Design/Logic Flaw
2007-07-24 17:30:00
Design/Logic Flaw
2007-09-12 01:17:00
cve
cve
CVE-2007-2930
2007-09-12 01:17:00
CVE-2007-2926
2007-07-24 17:30:00
CVE-2007-4019
2022-10-03 16:14:34
redhatcve
redhatcve
CVE-2007-2930
2015-10-30 10:12:39
cvelist
cvelist
CVE-2007-2930
2007-09-12 01:00:00
CVE-2007-2926
2007-07-24 17:00:00
oraclelinux
oraclelinux
Moderate: bind security update
2007-07-24 00:00:00
nessus
nessus
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2007:0740)
2007-07-27 00:00:00
SuSE 10 Security Update : bind,bind-devel,bind-utils (ZYPP Patch Number 3976)
2007-12-13 00:00:00
Debian DSA-1341-2 : bind9 - design error
2007-08-13 00:00:00
cert
cert
ISC BIND generates cryptographically weak DNS query IDs
2007-07-27 00:00:00
BIND version 8 generates cryptographically weak DNS query identifiers
2007-08-28 00:00:00
openvas
openvas
FreeBSD Ports: named
2008-09-04 00:00:00
HP-UX Update for BIND HPSBUX02251
2009-05-05 00:00:00
HP-UX Update for BIND 8 HPSBUX02289
2009-05-05 00:00:00
debian
debian
[SECURITY] [DSA 1342-2] New bind9 packages fix DNS cache poisoning
2007-07-26 17:03:40
[SECURITY] [DSA 1341-1] New bind9 packages fix DNS cache poisoning
2007-07-25 21:13:15
altlinux
altlinux
Security fix for the ALT Linux 6 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 8 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 5 package bind version 9.3.4-alt4
2007-07-24 00:00:00
nvd
nvd
CVE-2007-2926
2007-07-24 17:30:00
CVE-2007-4019
2007-09-12 01:17:00
securityvulns
securityvulns
ertificate spoofing with subjectAltName and domain name wildcards
2007-11-19 00:00:00
freebsd
freebsd
FreeBSD -- Predictable query ids in named(8)
2007-07-24 00:00:00
suse
suse
DNS cache poisoning in bind, bind9
2007-08-01 16:07:35
fedora
fedora
[SECURITY] Fedora Core 6 Update: bind-9.3.4-7.P1.fc6
2007-07-26 15:35:49
[SECURITY] Fedora 7 Update: bind-9.4.1-7.P1.fc7
2007-07-25 05:15:35
[SECURITY] Fedora 7 Update: bind-9.4.2-2.fc7
2007-12-20 20:14:27
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against ISC BIND Cache Poisoning Vulnerability
2007-08-16 00:00:00
Security Best Practice: Protect Yourself against DNS Cache Poisoning
2007-08-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:07.bind
2007-08-01 00:00:00
centos
centos
bind security update
2007-07-25 01:16:51
bind, caching security update
2007-07-24 15:48:10
debiancve
debiancve
CVE-2007-2926
2007-07-24 17:30:00
osv
osv
bind9 - DNS cache poisoning vulnerability
2007-07-25 00:00:00
ubuntu
ubuntu
Bind vulnerability
2007-07-25 00:00:00
redhat
redhat
(RHSA-2007:0740) Moderate: bind security update
2007-07-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:41
f5
f5
SOL8077 - BIND 8 vulnerability CVE-2007-2930
2007-11-05 00:00:00
K8077 : BIND 8 vulnerability CVE-2007-2930
2013-03-20 00:00:00
slackware
slackware
[slackware-security] bind
2007-07-26 22:15:41
gentoo
gentoo
BIND: Weak random number generation
2007-08-18 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.218 Low

EPSS

Percentile

96.5%

JSON
Related for NVD:CVE-2007-2930
ubuntucve2prion3cve3redhatcve1cvelist2oraclelinux1nessus67cert2openvas33debian2altlinux4nvd2securityvulns1freebsd1suse1fedora4checkpoint_advisories2freebsd_advisory1centos2debiancve1osv1ubuntu1redhat1veracode1f52slackware1gentoo1