CVE-2008-4100

CVE-2008-4100 documents a DNS spoofing risk in GNU adns 1.4 and earlier, caused by a fixed source port and sequential transaction IDs for DNS requests. This predictable ID/port behavior makes it easier for remote attackers to spoof DNS responses. The description notes this is a different issue fr...