mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Affected configurations

NVD

Node

applebonjourMatch1.0.4unknownwindows

AND

microsoftwindows-ntMatchxpsp3

microsoftwindows_2000Match-

microsoftwindows_2003_serverMatch-

microsoftwindows_vistaMatch-

microsoftwindows_xpMatch-sp2

References

lists.apple.com/archives/security-announce//2008/Sep/msg00002.html

secunia.com/advisories/31822

support.apple.com/kb/HT2990

www.securityfocus.com/bid/31093

www.securitytracker.com/id?1020844

www.vupen.com/english/advisories/2008/2524

cve 7

prion 7

cvelist 6

seebug 6

nessus 37

openvas 70

slackware 3

debian 10

checkpoint_advisories 2

freebsd_advisory 1

osv 2

ubuntu 2

altlinux 5

securityvulns 6

exploitpack 3

f5 2

redhat 2

suse 1

gentoo 2

packetstorm 3

fedora 3

debiancve 3

ubuntucve 4

checkpoint_security 1

nvd 4

oraclelinux 2

centos 2

freebsd 2

rubygems 1

cve

CVE-2008-3630

2008-09-11 01:13:09

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-2739

2008-09-26 16:21:43

prion

Design/Logic Flaw

2008-09-11 01:13:00

Spoofing

2008-07-08 23:41:00

Code injection

2008-09-26 16:21:00

cvelist

CVE-2008-3630

2008-09-10 16:00:00

CVE-2008-1447

2008-07-08 23:00:00

CVE-2008-1454

2008-07-08 23:00:00

seebug

Apple Bonjour for Windows mDNSResponder伪造DNS应答漏洞

2008-09-11 00:00:00

BIND 9.4.1-9.4.2 - Remote DNS Cache Poisoning Flaw Exploit (meta)

2014-07-01 00:00:00

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)

2008-07-24 00:00:00

nessus

Debian DSA-1605-1 : glibc - DNS cache poisoning

2008-07-10 00:00:00

FreeBSD : ruby -- DNS spoofing vulnerability (959d384d-6b59-11dd-9d79-001fc61c2a55)

2008-08-17 00:00:00

openSUSE Security Update : bind (bind-82)

2009-07-21 00:00:00

openvas

Slackware Advisory SSA:2008-191-02 bind

2012-09-11 00:00:00

Oracle: Security Advisory (ELSA-2008-0533)

2015-10-08 00:00:00

Nmap NSE net: dns-random-srcport

2011-06-01 00:00:00

slackware

[slackware-security] bind

2008-07-10 04:29:01

[slackware-security] ruby

2008-11-29 21:37:03

[slackware-security] dnsmasq

2008-07-24 00:02:47

debian

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

2008-09-22 06:12:09

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

2008-09-22 06:12:09

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-27 09:36:54

checkpoint_advisories

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037) - High Confidence (CVE-2008-1447)

2013-05-09 00:00:00

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037; CVE-2008-1447)

2011-11-01 00:00:00

freebsd_advisory

FreeBSD-SA-08:06.bind

2008-07-13 00:00:00

osv

refpolicy - incompatible policy

2008-07-25 00:00:00

bind9 - cache poisoning

2008-07-08 00:00:00

ubuntu

Bind vulnerability

2008-07-08 00:00:00

Dnsmasq vulnerability

2008-07-22 00:00:00

altlinux

Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6

2008-08-12 00:00:00

Security fix for the ALT Linux 5 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 6 package bind version 9.3.5-alt2

2008-06-06 00:00:00

securityvulns

CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit

2008-07-25 00:00:00

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-29 00:00:00

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-12 00:00:00

exploitpack

BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)

2008-07-23 00:00:00

BIND 9.x - Remote DNS Cache Poisoning (Python)

2008-07-24 00:00:00

BIND 9.x - Remote DNS Cache Poisoning

2008-07-25 00:00:00

K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2013-03-19 00:00:00

SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2008-07-10 00:00:00

redhat

(RHSA-2008:0789) Moderate: dnsmasq security update

2008-08-11 00:00:00

(RHSA-2008:0533) Important: bind security update

2008-07-08 00:00:00

suse

DNS cache poisoning in bind

2008-07-11 09:57:52

gentoo

BIND: Cache poisoning

2008-07-11 00:00:00

dnsmasq: Denial of Service and DNS spoofing

2008-09-04 00:00:00

packetstorm

bailiwicked_domain.rb.txt

2008-07-24 00:00:00

bind9x-poison.txt

2008-07-25 00:00:00

bailiwicked_host.rb.txt

2008-07-24 00:00:00

fedora

[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9

2009-02-14 22:11:22

[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9

2008-07-09 21:45:32

[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9

2009-01-15 02:51:25

debiancve

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-4099

2008-09-18 17:59:32

CVE-2008-4100

2008-09-18 17:59:32

ubuntucve

CVE-2008-1447

2008-07-08 00:00:00

CVE-2008-4099

2008-09-18 00:00:00

CVE-2008-4100

2008-09-18 00:00:00

checkpoint_security

Check Point response to DNS poisoning vulnerability CVE-2008-1447

2008-07-05 21:00:00

nvd

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-3905

2008-09-04 17:41:00

CVE-2008-4099

2008-09-18 17:59:32

oraclelinux

bind security update

2008-07-08 00:00:00

dnsmasq security update

2008-08-11 00:00:00

centos

bind security update

2008-07-09 01:20:56

bind, caching, selinux security update

2008-07-08 22:25:27

freebsd

FreeBSD -- DNS cache poisoning

2008-07-08 00:00:00

ruby -- DNS spoofing vulnerability

2008-08-08 00:00:00

rubygems

ruby -- DNS spoofing vulnerability in resolv.rb

2008-05-04 20:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.133 Low

EPSS

Percentile

95.6%

JSON

Related for NVD:CVE-2008-3630

cve7 prion7 cvelist6 seebug6 nessus37 openvas70 slackware3 debian10 checkpoint_advisories2 freebsd_advisory1 osv2 ubuntu2 altlinux5 securityvulns6 exploitpack3 f52 redhat2 suse1 gentoo2 packetstorm3 fedora3 debiancve3 ubuntucve4 checkpoint_security1 nvd4 oraclelinux2 centos2 freebsd2 rubygems1