Lucene search
HistoryNov 18, 2008 - 4:00 p.m.
CVE-2008-5133
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.133 Low
EPSS
Percentile
95.6%
ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.
Affected configurations
Node
sunopensolarisRange≤snv_95sparc
ORsunopensolarisRange≤snv_95x86
ORsunopensolarisMatchsnv_01sparc
ORsunopensolarisMatchsnv_01x86
ORsunopensolarisMatchsnv_02sparc
ORsunopensolarisMatchsnv_02x86
ORsunopensolarisMatchsnv_03sparc
ORsunopensolarisMatchsnv_03x86
ORsunopensolarisMatchsnv_04sparc
ORsunopensolarisMatchsnv_04x86
ORsunopensolarisMatchsnv_05sparc
ORsunopensolarisMatchsnv_05x86
ORsunopensolarisMatchsnv_06sparc
ORsunopensolarisMatchsnv_06x86
ORsunopensolarisMatchsnv_07sparc
ORsunopensolarisMatchsnv_07x86
ORsunopensolarisMatchsnv_08sparc
ORsunopensolarisMatchsnv_08x86
ORsunopensolarisMatchsnv_09sparc
ORsunopensolarisMatchsnv_09x86
ORsunopensolarisMatchsnv_10sparc
ORsunopensolarisMatchsnv_10x86
ORsunopensolarisMatchsnv_11sparc
ORsunopensolarisMatchsnv_12sparc
ORsunopensolarisMatchsnv_13sparc
ORsunopensolarisMatchsnv_14sparc
ORsunopensolarisMatchsnv_15sparc
ORsunopensolarisMatchsnv_16sparc
ORsunopensolarisMatchsnv_17sparc
ORsunopensolarisMatchsnv_18sparc
ORsunopensolarisMatchsnv_19sparc
ORsunopensolarisMatchsnv_20sparc
ORsunopensolarisMatchsnv_21sparc
ORsunopensolarisMatchsnv_21x86
ORsunopensolarisMatchsnv_22sparc
ORsunopensolarisMatchsnv_22x86
ORsunopensolarisMatchsnv_23sparc
ORsunopensolarisMatchsnv_23x86
ORsunopensolarisMatchsnv_24sparc
ORsunopensolarisMatchsnv_24x86
ORsunopensolarisMatchsnv_25sparc
ORsunopensolarisMatchsnv_25x86
ORsunopensolarisMatchsnv_26sparc
ORsunopensolarisMatchsnv_26x86
ORsunopensolarisMatchsnv_27sparc
ORsunopensolarisMatchsnv_27x86
ORsunopensolarisMatchsnv_28sparc
ORsunopensolarisMatchsnv_28x86
ORsunopensolarisMatchsnv_29sparc
ORsunopensolarisMatchsnv_29x86
ORsunopensolarisMatchsnv_30sparc
ORsunopensolarisMatchsnv_30x86
ORsunopensolarisMatchsnv_31sparc
ORsunopensolarisMatchsnv_31x86
ORsunopensolarisMatchsnv_32sparc
ORsunopensolarisMatchsnv_32x86
ORsunopensolarisMatchsnv_33sparc
ORsunopensolarisMatchsnv_33x86
ORsunopensolarisMatchsnv_34sparc
ORsunopensolarisMatchsnv_34x86
ORsunopensolarisMatchsnv_35sparc
ORsunopensolarisMatchsnv_35x86
ORsunopensolarisMatchsnv_36sparc
ORsunopensolarisMatchsnv_36x86
ORsunopensolarisMatchsnv_37sparc
ORsunopensolarisMatchsnv_37x86
ORsunopensolarisMatchsnv_38sparc
ORsunopensolarisMatchsnv_38x86
ORsunopensolarisMatchsnv_39sparc
ORsunopensolarisMatchsnv_39x86
ORsunopensolarisMatchsnv_40sparc
ORsunopensolarisMatchsnv_40x86
ORsunopensolarisMatchsnv_41sparc
ORsunopensolarisMatchsnv_41x86
ORsunopensolarisMatchsnv_42sparc
ORsunopensolarisMatchsnv_42x86
ORsunopensolarisMatchsnv_43sparc
ORsunopensolarisMatchsnv_43x86
ORsunopensolarisMatchsnv_44sparc
ORsunopensolarisMatchsnv_44x86
ORsunopensolarisMatchsnv_45sparc
ORsunopensolarisMatchsnv_45x86
ORsunopensolarisMatchsnv_46sparc
ORsunopensolarisMatchsnv_46x86
ORsunopensolarisMatchsnv_47sparc
ORsunopensolarisMatchsnv_47x86
ORsunopensolarisMatchsnv_48sparc
ORsunopensolarisMatchsnv_48x86
ORsunopensolarisMatchsnv_49sparc
ORsunopensolarisMatchsnv_49x86
ORsunopensolarisMatchsnv_50sparc
ORsunopensolarisMatchsnv_50x86
ORsunopensolarisMatchsnv_51sparc
ORsunopensolarisMatchsnv_51x86
ORsunopensolarisMatchsnv_52sparc
ORsunopensolarisMatchsnv_52x86
ORsunopensolarisMatchsnv_53sparc
ORsunopensolarisMatchsnv_53x86
ORsunopensolarisMatchsnv_54sparc
ORsunopensolarisMatchsnv_54x86
ORsunopensolarisMatchsnv_55sparc
ORsunopensolarisMatchsnv_55x86
ORsunopensolarisMatchsnv_56sparc
ORsunopensolarisMatchsnv_56x86
ORsunopensolarisMatchsnv_57sparc
ORsunopensolarisMatchsnv_57x86
ORsunopensolarisMatchsnv_58sparc
ORsunopensolarisMatchsnv_58x86
ORsunopensolarisMatchsnv_59sparc
ORsunopensolarisMatchsnv_59x86
ORsunopensolarisMatchsnv_60sparc
ORsunopensolarisMatchsnv_60x86
ORsunopensolarisMatchsnv_61sparc
ORsunopensolarisMatchsnv_61x86
ORsunopensolarisMatchsnv_62sparc
ORsunopensolarisMatchsnv_62x86
ORsunopensolarisMatchsnv_63sparc
ORsunopensolarisMatchsnv_63x86
ORsunopensolarisMatchsnv_64sparc
ORsunopensolarisMatchsnv_64x86
ORsunopensolarisMatchsnv_65sparc
ORsunopensolarisMatchsnv_65x86
ORsunopensolarisMatchsnv_66sparc
ORsunopensolarisMatchsnv_66x86
ORsunopensolarisMatchsnv_67sparc
ORsunopensolarisMatchsnv_67x86
ORsunopensolarisMatchsnv_68sparc
ORsunopensolarisMatchsnv_68x86
ORsunopensolarisMatchsnv_69sparc
ORsunopensolarisMatchsnv_69x86
ORsunopensolarisMatchsnv_70sparc
ORsunopensolarisMatchsnv_70x86
ORsunopensolarisMatchsnv_71sparc
ORsunopensolarisMatchsnv_71x86
ORsunopensolarisMatchsnv_72sparc
ORsunopensolarisMatchsnv_72x86
ORsunopensolarisMatchsnv_73sparc
ORsunopensolarisMatchsnv_73x86
ORsunopensolarisMatchsnv_74sparc
ORsunopensolarisMatchsnv_74x86
ORsunopensolarisMatchsnv_75sparc
ORsunopensolarisMatchsnv_75x86
ORsunopensolarisMatchsnv_76sparc
ORsunopensolarisMatchsnv_76x86
ORsunopensolarisMatchsnv_77sparc
ORsunopensolarisMatchsnv_77x86
ORsunopensolarisMatchsnv_78sparc
ORsunopensolarisMatchsnv_78x86
ORsunopensolarisMatchsnv_79sparc
ORsunopensolarisMatchsnv_79x86
ORsunopensolarisMatchsnv_80sparc
ORsunopensolarisMatchsnv_80x86
ORsunopensolarisMatchsnv_81sparc
ORsunopensolarisMatchsnv_81x86
ORsunopensolarisMatchsnv_82sparc
ORsunopensolarisMatchsnv_82x86
ORsunopensolarisMatchsnv_83sparc
ORsunopensolarisMatchsnv_83x86
ORsunopensolarisMatchsnv_84sparc
ORsunopensolarisMatchsnv_84x86
ORsunopensolarisMatchsnv_85sparc
ORsunopensolarisMatchsnv_85x86
ORsunopensolarisMatchsnv_86sparc
ORsunopensolarisMatchsnv_86x86
ORsunopensolarisMatchsnv_87sparc
ORsunopensolarisMatchsnv_87x86
ORsunopensolarisMatchsnv_88sparc
ORsunopensolarisMatchsnv_88x86
ORsunopensolarisMatchsnv_89sparc
ORsunopensolarisMatchsnv_89x86
ORsunopensolarisMatchsnv_90sparc
ORsunopensolarisMatchsnv_90x86
ORsunopensolarisMatchsnv_91sparc
ORsunopensolarisMatchsnv_91x86
ORsunopensolarisMatchsnv_92sparc
ORsunopensolarisMatchsnv_92x86
ORsunopensolarisMatchsnv_93sparc
ORsunopensolarisMatchsnv_93x86
ORsunopensolarisMatchsnv_94sparc
ORsunopensolarisMatchsnv_94x86
ORsunsolarisMatch10sparc
ORsunsolarisMatch10x86
Related
cisco
cisco
Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
2008-07-08 18:00:00
cvelist
cvelist
cve
cve
prion
prion
nessus
nessus
Solaris 10 (sparc) : 127888-11
2009-04-23 00:00:00
Solaris 10 (x86) : 127889-11
2009-04-23 00:00:00
Fedora 9 : dnsmasq-2.45-1.fc9 (2009-1069)
2009-02-17 00:00:00
redhat
redhat
(RHSA-2008:0789) Moderate: dnsmasq security update
2008-08-11 00:00:00
(RHSA-2008:0533) Important: bind security update
2008-07-08 00:00:00
gentoo
gentoo
BIND: Cache poisoning
2008-07-11 00:00:00
dnsmasq: Denial of Service and DNS spoofing
2008-09-04 00:00:00
packetstorm
packetstorm
bind9x-poison.txt
2008-07-25 00:00:00
bailiwicked_domain.rb.txt
2008-07-24 00:00:00
bailiwicked_host.rb.txt
2008-07-24 00:00:00
openvas
openvas
Debian Security Advisory DSA 1603-1 (bind9)
2008-07-15 00:00:00
Fedora Core 9 FEDORA-2009-1069 (dnsmasq)
2009-02-18 00:00:00
SLES10: Security update for bind
2009-10-13 00:00:00
debian
debian
[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
2008-07-25 06:29:36
[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
2008-07-31 16:45:20
[SECURITY] [DSA 1604-1] BIND 8 deprecation notice
2008-07-08 17:03:55
checkpoint_advisories
checkpoint_advisories
altlinux
altlinux
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
2008-06-06 00:00:00
Security fix for the ALT Linux 9 package bind version 9.3.5-alt2
2008-06-06 00:00:00
Security fix for the ALT Linux 8 package bind version 9.3.5-alt2
2008-06-06 00:00:00
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9
2009-02-14 22:11:22
[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9
2008-07-09 21:45:32
[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9
2009-01-15 02:51:25
osv
osv
bind9 - cache poisoning
2008-07-08 00:00:00
refpolicy - incompatible policy
2008-07-25 00:00:00
debiancve
debiancve
CVE-2008-1447
2008-07-08 23:41:00
CVE-2008-4100
2008-09-18 17:59:32
suse
suse
DNS cache poisoning in bind
2008-07-11 09:57:52
checkpoint_security
checkpoint_security
Check Point response to DNS poisoning vulnerability CVE-2008-1447
2008-07-05 21:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
2008-07-12 00:00:00
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
2008-07-29 00:00:00
CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
2008-07-25 00:00:00
nvd
nvd
oraclelinux
oraclelinux
bind security update
2008-07-08 00:00:00
dnsmasq security update
2008-08-11 00:00:00
centos
centos
bind, caching, selinux security update
2008-07-08 22:25:27
bind security update
2008-07-09 01:20:56
ubuntu
ubuntu
Dnsmasq vulnerability
2008-07-22 00:00:00
Bind vulnerability
2008-07-08 00:00:00
f5
f5
SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2008-07-10 00:00:00
K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2013-03-19 00:00:00
slackware
slackware
[slackware-security] bind
2008-07-10 04:29:01
[slackware-security] ruby
2008-11-29 21:37:03
[slackware-security] dnsmasq
2008-07-24 00:02:47
freebsd_advisory
freebsd_advisory
FreeBSD-SA-08:06.bind
2008-07-13 00:00:00
seebug
seebug
BIND 9.4.1-9.4.2 - Remote DNS Cache Poisoning Flaw Exploit (meta)
2014-07-01 00:00:00
BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)
2008-07-24 00:00:00
BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (py)
2008-07-24 00:00:00
exploitpack
exploitpack
BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
2008-07-23 00:00:00
BIND 9.x - Remote DNS Cache Poisoning (Python)
2008-07-24 00:00:00
BIND 9.x - Remote DNS Cache Poisoning
2008-07-25 00:00:00
freebsd
freebsd
FreeBSD -- DNS cache poisoning
2008-07-08 00:00:00
ruby -- DNS spoofing vulnerability
2008-08-08 00:00:00
rubygems
rubygems
ruby -- DNS spoofing vulnerability in resolv.rb
2008-05-04 20:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.133 Low
EPSS
Percentile
95.6%
Related for NVD:CVE-2008-5133