CVE-2007-2926
- State
- Published
- Severity
- Not scored
- Published
- Jul 24, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 30, 2007
Description
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
- http://www.trusteer.com/docs/bind9dns_s.html
- 26231third-party-advisory
- ADV-2007-2932vdb-entry
- HPSBOV03226vendor-advisory
- 26847third-party-advisory
- IZ02218vendor-advisory
- ADV-2007-2914vdb-entry
- RHSA-2007:0740vendor-advisory
- 26217third-party-advisory
- 26509third-party-advisory
- HPSBOV02261vendor-advisory
- 26444vdb-entry
- http://www.securiteam.com/securitynews/5VP0L0UM0A.html
- HPSBUX02251vendor-advisory
- 26605third-party-advisory
- 103018vendor-advisory
- MDKSA-2007:149vendor-advisory
- 26607third-party-advisory
- 20070727 Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)mailing-list
- 26148third-party-advisory
- FreeBSD-SA-07:07vendor-advisory
- VU#252735third-party-advisory
- http://www.trusteer.com/docs/bind9dns.html
- 26180third-party-advisory
- GLSA-200708-13vendor-advisory
- 26152third-party-advisory
- 2007-0023vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
- SSA:2007-207-01vendor-advisory
- APPLE-SA-2007-11-14vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307041
- 20070724 "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)mailing-list
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- IZ02219vendor-advisory
- isc-bind-queryid-spoofing(35575)vdb-entry
- ADV-2007-2782vdb-entry
- 26227third-party-advisory
- 26261third-party-advisory
- ADV-2007-3868vdb-entry
- 25037vdb-entry
- 26515third-party-advisory
- USN-491-1vendor-advisory
- 26330third-party-advisory
- https://issues.rpath.com/browse/RPL-1587
- HPSBTU02256vendor-advisory
- 1018442vdb-entry
- DSA-1341vendor-advisory
- 26308third-party-advisory
- SUSE-SA:2007:047vendor-advisory
- ADV-2007-2627vdb-entry
- oval:org.mitre.oval:def:2226vdb-entrysignature
- 27643third-party-advisory
- 26236third-party-advisory
- ADV-2007-2662vdb-entry
- 26195third-party-advisory
- ADV-2007-3242vdb-entry
- oval:org.mitre.oval:def:10293vdb-entrysignature
- OpenPKG-SA-2007.022vendor-advisory
- TA07-319Athird-party-advisory
- 26925third-party-advisory
- 26160third-party-advisory
- 20070724 Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)mailing-list
- 20070726 Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)mailing-list
- 26531third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.