Lucene search
+L

46 matches found

CVE
CVE
•added 2007/06/25 9:00 p.m.•94 views

CVE-2007-3377

CVE-2007-3377 affects the Perl module Net::DNS (pre-0.60). The issue: Net::DNS generates predictable DNS query IDs (fixed increment) and can reuse the same starting ID for all child processes of a forking server, enabling remote attackers to spoof DNS responses. Connected advisories show mitigati...

4.3CVSS7.3AI score0.02049EPSS
SaveExploits1References31Affected Software1
Debian CVE
Debian CVE
•added 2007/06/25 9:00 p.m.•34 views

CVE-2007-3377

Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...

4.3CVSS6.3AI score0.02049EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/25 12:00 a.m.•7 views

CVE-2007-3377: Undefined Security Weakness

Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...

4.3CVSS5.9AI score0.02049EPSS
SaveExploits1References1
NVD
NVD
•added 2003/06/09 4:00 a.m.•49 views

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

7.5CVSS6.6AI score0.06912EPSS
SaveExploits1References5
securityvulns
securityvulns
•added 2000/06/23 12:00 a.m.•51 views

Проблемы с libdes в NetBSD

Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...

0.7AI score
SaveExploits0References1
NVD
NVD
•added 2000/02/28 5:00 a.m.•27 views

CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...

7.5CVSS6.7AI score0.01387EPSS
SaveExploits0References2
Rows per page
Query Builder