Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2926
HistoryJul 24, 2007 - 12:00 a.m.

CVE-2007-2926

2007-07-2400:00:00
ubuntu.com
ubuntu.com
5

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.111 Low

EPSS

Percentile

95.1%

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during
generation of DNS query ids when answering resolver questions or sending
NOTIFY messages to slave name servers, which makes it easier for remote
attackers to guess the next query id and perform DNS cache poisoning.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchbind9< 9.3.2-2ubuntu1.3UNKNOWN
ubuntu6.10noarchbind9< 9.3.2-2ubuntu3.2UNKNOWN
ubuntu7.04noarchbind9< 9.3.4-2ubuntu2.1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.111 Low

EPSS

Percentile

95.1%