CVE-2007-3377

CVE-2007-3377 affects the Perl module Net::DNS (pre-0.60). The issue: Net::DNS generates predictable DNS query IDs (fixed increment) and can reuse the same starting ID for all child processes of a forking server, enabling remote attackers to spoof DNS responses. Connected advisories show mitigati...

CVE-2006-3377

CVE-2006-3377 affects JMB Software AutoRank PHP (versions ≤3.02) and AutoRank Pro (≤5.01). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter in search.php or the Username parameter in main.cgi. Ther...