Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2007-2930
HistorySep 12, 2007 - 1:17 a.m.

Code injection

2007-09-1201:17:00
PRIOn knowledge base
www.prio-n.com
2

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.035 Low

EPSS

Percentile

91.3%

JSON

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

CPENameOperatorVersion
bindle8.4.7

References

Related

ubuntucve 2
cve 3
nessus 67
altlinux 4
oraclelinux 1
openvas 33
debian 2
cert 2
securityvulns 1
checkpoint_advisories 2
fedora 4
suse 1
freebsd 1
freebsd_advisory 1
redhat 1
veracode 1
prion 2
centos 2
ubuntu 1
osv 1
debiancve 1
f5 2
slackware 1
gentoo 1
ubuntucve
ubuntucve
CVE-2007-2930
2007-09-12 00:00:00
CVE-2007-2926
2007-07-24 00:00:00
cve
cve
CVE-2007-2930
2007-09-12 01:17:00
CVE-2007-2926
2007-07-24 17:30:00
CVE-2007-4019
2007-09-12 01:17:00
nessus
nessus
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2007:0740)
2007-07-27 00:00:00
Debian DSA-1341-2 : bind9 - design error
2007-08-13 00:00:00
SuSE 10 Security Update : bind,bind-devel,bind-utils (ZYPP Patch Number 3976)
2007-12-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 8 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 5 package bind version 9.3.4-alt4
2007-07-24 00:00:00
oraclelinux
oraclelinux
Moderate: bind security update
2007-07-24 00:00:00
openvas
openvas
HP-UX Update for BIND HPSBUX02251
2009-05-05 00:00:00
FreeBSD Ports: named
2008-09-04 00:00:00
Debian Security Advisory DSA 1341-1 (bind9)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1342-2] New bind9 packages fix DNS cache poisoning
2007-07-26 17:03:40
[SECURITY] [DSA 1341-1] New bind9 packages fix DNS cache poisoning
2007-07-25 21:13:15
cert
cert
ISC BIND generates cryptographically weak DNS query IDs
2007-07-27 00:00:00
BIND version 8 generates cryptographically weak DNS query identifiers
2007-08-28 00:00:00
securityvulns
securityvulns
ertificate spoofing with subjectAltName and domain name wildcards
2007-11-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against ISC BIND Cache Poisoning Vulnerability
2007-08-16 00:00:00
Security Best Practice: Protect Yourself against DNS Cache Poisoning
2007-08-16 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: bind-9.3.4-7.P1.fc6
2007-07-26 15:35:49
[SECURITY] Fedora 7 Update: bind-9.4.1-7.P1.fc7
2007-07-25 05:15:35
[SECURITY] Fedora 7 Update: bind-9.4.2-2.fc7
2007-12-20 20:14:27
suse
suse
DNS cache poisoning in bind, bind9
2007-08-01 16:07:35
freebsd
freebsd
FreeBSD -- Predictable query ids in named(8)
2007-07-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:07.bind
2007-08-01 00:00:00
redhat
redhat
(RHSA-2007:0740) Moderate: bind security update
2007-07-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:41
prion
prion
Design/Logic Flaw
2007-07-24 17:30:00
Design/Logic Flaw
2007-09-12 01:17:00
centos
centos
bind, caching security update
2007-07-24 15:48:10
bind security update
2007-07-25 01:16:51
ubuntu
ubuntu
Bind vulnerability
2007-07-25 00:00:00
osv
osv
bind9 - DNS cache poisoning vulnerability
2007-07-25 00:00:00
debiancve
debiancve
CVE-2007-2926
2007-07-24 17:30:00
f5
f5
K8077 : BIND 8 vulnerability CVE-2007-2930
2013-03-20 00:00:00
SOL8077 - BIND 8 vulnerability CVE-2007-2930
2007-11-05 00:00:00
slackware
slackware
[slackware-security] bind
2007-07-26 22:15:41
gentoo
gentoo
BIND: Weak random number generation
2007-08-18 00:00:00

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.035 Low

EPSS

Percentile

91.3%

JSON
Related for PRION:CVE-2007-2930
ubuntucve2cve3nessus67altlinux4oraclelinux1openvas33debian2cert2securityvulns1checkpoint_advisories2fedora4suse1freebsd1freebsd_advisory1redhat1veracode1prion2centos2ubuntu1osv1debiancve1f52slackware1gentoo1