CVE-2008-4100 GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE...
MediumCVSS 6.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU adns | <= 1.4 | No fix listed |
| GNU adns | = 0.1 | No fix listed |
| GNU adns | = 0.2 | No fix listed |
| GNU adns | = 0.3 | No fix listed |
| GNU adns | = 0.4 | No fix listed |
| GNU adns | = 0.5 | No fix listed |
| GNU adns | = 0.6 | No fix listed |
| GNU adns | = 0.7 | No fix listed |
| GNU adns | = 0.8 | No fix listed |
| GNU adns | = 0.9 | No fix listed |
| GNU adns | = 1.0 | No fix listed |
| GNU adns | = 1.1 | No fix listed |
| GNU adns | = 1.2 | No fix listed |
| GNU adns | = 1.3 | No fix listed |
| debian/adns(Debian:12) | < 1.4-2 | 1.4-2 |
| debian/adns(Debian:13) | < 1.4-2 | 1.4-2 |
| debian/adns(Debian:14) | < 1.4-2 | 1.4-2 |
References
- bugs.debian.org
- [oss-security] 20080911 Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) mailing-list
- [oss-security] 20080915 Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) mailing-list
- 6197 exploit
- Debian Security Tracker CVE-2008-4100 vendor-advisory
- bugs.debian.org issue-tracking