vulnwire
4.3med

CVE-2007-29261 exploit

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or send…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.1%
percentile 96%
Public exploits
1
Exploit-DB

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Exploit prediction (EPSS)

13.09% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-4266 BIND 9 0.3beta - DNS Cache Poisoning · remote · 2007-08-07

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

References

  • support.avaya.com /elmodocs2/security/ASA-2007-389.htm · x_refsource_CONFIRM, x_transferred
  • trusteer.com /docs/bind9dns_s.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/26231 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/2932 · vdb-entry, x_refsource_VUPEN, x_transferred
  • marc.info /?l=bugtraq&m=141879471518471&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/26847 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IZ02218&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • vupen.com /english/advisories/2007/2914 · vdb-entry, x_refsource_VUPEN, x_transferred
  • redhat.com /support/errata/RHSA-2007-0740.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/26217 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/26509 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c01174368 · vendor-advisory, x_refsource_HP, x_transferred
  • securityfocus.com /bid/26444 · vdb-entry, x_refsource_BID, x_transferred
  • securiteam.com /securitynews/5VP0L0UM0A.html · x_refsource_MISC, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c01123426 · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/26605 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-103018-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:149 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/26607 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/474856/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/26148 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.freebsd.org /advisories/FreeBSD-SA-07:07.bind.asc · vendor-advisory, x_refsource_FREEBSD, x_transferred
  • kb.cert.org /vuls/id/252735 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • trusteer.com /docs/bind9dns.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/26180 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200708-13.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/26152 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • trustix.org /errata/2007/0023/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • support.nortel.com /go/main.jsp?cscat=BLTNDETAIL&id=623903 · x_refsource_CONFIRM, x_transferred
  • slackware.org /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • lists.apple.com /archives/security-announce/2007/Nov/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • docs.info.apple.com /article.html?artnum=307041 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /archive/1/474516/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • isc.org /index.pl?/sw/bind/bind-security.php · x_refsource_CONFIRM, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IZ02219&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35575 · vdb-entry, x_refsource_XF, x_transferred
  • vupen.com /english/advisories/2007/2782 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/26227 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/26261 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/3868 · vdb-entry, x_refsource_VUPEN, x_transferred
  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c01154600
  • secunia.com /advisories/26160
  • secunia.com /advisories/26195
  • secunia.com /advisories/26236
  • secunia.com /advisories/26308
  • secunia.com /advisories/26330
  • secunia.com /advisories/26515
  • secunia.com /advisories/26531
  • secunia.com /advisories/26925
  • secunia.com /advisories/27643
  • debian.org /security/2007/dsa-1341
  • novell.com /linux/security/advisories/2007_47_bind.html
  • openpkg.com /security/advisories/OpenPKG-SA-2007.022.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.