CVE-2008-1447 The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementati...
MediumCVSS 6.8
EPSS 95.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | = 4 | No fix listed |
| isc bind | = 8 | No fix listed |
| isc bind | = 9.2.9 | No fix listed |
| debian/adns(Debian:12) | < 1.4-2 | 1.4-2 |
| debian/adns(Debian:13) | < 1.4-2 | 1.4-2 |
| debian/adns(Debian:14) | < 1.4-2 | 1.4-2 |
| debian/bind9(Debian:12) | < 1:9.5.0.dfsg-5 | 1:9.5.0.dfsg-5 |
| debian/bind9(Debian:13) | < 1:9.5.0.dfsg-5 | 1:9.5.0.dfsg-5 |
| debian/bind9(Debian:14) | < 1:9.5.0.dfsg-5 | 1:9.5.0.dfsg-5 |
| debian/dnsmasq(Debian:12) | < 2.43-1 | 2.43-1 |
| debian/dnsmasq(Debian:13) | < 2.43-1 | 2.43-1 |
| debian/dnsmasq(Debian:14) | < 2.43-1 | 2.43-1 |
| debian/dnspython(Debian:12) | < 1.7.1-1 | 1.7.1-1 |
| debian/dnspython(Debian:13) | < 1.7.1-1 | 1.7.1-1 |
| debian/dnspython(Debian:14) | < 1.7.1-1 | 1.7.1-1 |
| debian/libnet-dns-perl(Debian:12) | < 0.63-2 | 0.63-2 |
| debian/libnet-dns-perl(Debian:13) | < 0.63-2 | 0.63-2 |
| debian/libnet-dns-perl(Debian:14) | < 0.63-2 | 0.63-2 |
| debian/refpolicy(Debian:12) | < 2:0.0.20080702-1 | 2:0.0.20080702-1 |
| debian/refpolicy(Debian:13) | < 2:0.0.20080702-1 | 2:0.0.20080702-1 |
| debian/refpolicy(Debian:14) | < 2:0.0.20080702-1 | 2:0.0.20080702-1 |
| debian/udns(Debian:12) | < 0.2-1 | 0.2-1 |
| debian/udns(Debian:13) | < 0.2-1 | 0.2-1 |
| debian/udns(Debian:14) | < 0.2-1 | 0.2-1 |
References
- Debian Security Tracker CVE-2008-1447 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- blog.invisibledenizen.org technical-description
- bugs.debian.org third-party-advisory
- HPSBOV02357 broken-link vendor-advisory
- HPSBNS02405 broken-link vendor-advisory
- APPLE-SA-2008-07-31 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2008-09-09 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2008-09-12 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2008-09-15 mailing-list third-party-advisory vendor-advisory
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. broken-link mailing-list
- SUSE-SA:2008:033 third-party-advisory vendor-advisory
- SUSE-SR:2008:017 third-party-advisory vendor-advisory
- SSRT080058 third-party-advisory vendor-advisory
- HPSBTU02358 third-party-advisory vendor-advisory
- HPSBMP02404 third-party-advisory vendor-advisory
- HPSBOV03226 third-party-advisory vendor-advisory
- RHSA-2008:0533 third-party-advisory vendor-advisory
- 30925 third-party-advisory
- 30973 third-party-advisory
- 30977 third-party-advisory
- 30979 third-party-advisory
- 30980 third-party-advisory
- 30988 third-party-advisory vendor-advisory
- 30989 third-party-advisory vendor-advisory
- 30998 third-party-advisory
- 31011 third-party-advisory
- 31012 third-party-advisory
- 31014 third-party-advisory
- 31019 third-party-advisory
- 31022 third-party-advisory
- 31030 third-party-advisory
- 31031 third-party-advisory
- 31033 third-party-advisory vendor-advisory
- 31052 third-party-advisory vendor-advisory
- 31065 third-party-advisory
- 31072 third-party-advisory
- 31093 third-party-advisory
- 31094 third-party-advisory vendor-advisory
- 31137 third-party-advisory vendor-advisory
- 31143 third-party-advisory
- 31151 third-party-advisory
- 31152 third-party-advisory
- 31153 third-party-advisory
- 31169 third-party-advisory
- 31197 third-party-advisory vendor-advisory
- 31199 third-party-advisory
- 31204 third-party-advisory
- 31207 third-party-advisory vendor-advisory
- 31209 third-party-advisory
- 31212 third-party-advisory
- 31213 third-party-advisory
- 31221 third-party-advisory
- 31236 third-party-advisory
- 31237 third-party-advisory vendor-advisory
- 31254 third-party-advisory vendor-advisory
- 31326 third-party-advisory
- 31354 third-party-advisory
- 31422 third-party-advisory
- 31430 third-party-advisory
- 31451 third-party-advisory
- 31482 third-party-advisory
- 31495 third-party-advisory
- 31588 third-party-advisory
- 31687 third-party-advisory
- 31823 third-party-advisory
- 31882 third-party-advisory
- 31900 third-party-advisory
- 33178 third-party-advisory
- 33714 third-party-advisory
- 33786 third-party-advisory
- FreeBSD-SA-08:06 third-party-advisory vendor-advisory
- GLSA-200807-08 third-party-advisory vendor-advisory
- GLSA-200812-17 third-party-advisory vendor-advisory
- GLSA-201209-25 third-party-advisory vendor-advisory
- SSA:2008-205-01 third-party-advisory vendor-advisory
- SSA:2008-191 third-party-advisory vendor-advisory
- 239392 third-party-advisory vendor-advisory
- 240048 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.citrix.com third-party-advisory
- support.citrix.com third-party-advisory
- support.nortel.com third-party-advisory
- up2date.astaro.com third-party-advisory
- wiki.rpath.com third-party-advisory
- wiki.rpath.com third-party-advisory
- www.bluecoat.com third-party-advisory
- www.caughq.org third-party-advisory
- www.caughq.org third-party-advisory
- 20080708 Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks third-party-advisory vendor-advisory
- DSA-1603 patch vendor-advisory
- DSA-1604 third-party-advisory vendor-advisory
- DSA-1605 third-party-advisory vendor-advisory
- DSA-1619 third-party-advisory vendor-advisory
- DSA-1623 third-party-advisory vendor-advisory