|
 |
|
BIND 8 Predictable DNS Query IDs Vulnerability
|
|
|
|
|
Secunia Advisory:
|
SA26629
|
|
|
Release Date:
|
2007-08-28
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | ISC BIND 8.x.x
|
| | CVE reference: | CVE-2007-2930 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
Amit Klein has reported a vulnerability in BIND, which can be exploited by malicious people to poison the DNS cache.
The vulnerability is caused due to predictable query IDs in outgoing queries (e.g. if BIND works as resolver or when sending NOTIFYs to slaves) and can be exploited to poison the DNS cache when the query ID is guessed.
Reportedly, the probability to guess the next query ID is between 25% and 43%, depending on the handled DNS traffic.
The vulnerability is reported in BIND 8.x versions prior to 8.4.7-P1.
Solution:
Update to BIND 8.4.7-P1.
NOTE: BIND 8.x has reached "End of Life". The vendor advises all users to upgrade to BIND 9.4.1-P1.
Provided and/or discovered by:
Amit Klein
Original Advisory:
ISC:
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php
Trusteer:
http://www.trusteer.com/docs/bind8dns.html
Other References:
US-CERT VU#927905:
http://www.kb.cert.org/vuls/id/927905
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
7 Related Secunia Security Advisories
|
|
|
1. ISC BIND Query Port DNS Cache Poisoning
|
|
2. ISC BIND libbind "inet_network()" Off-By-One Vulnerability
|
|
3. BIND Zone Transfer TSIG Handling Denial of Service
|
|
4. BIND "q_usedns" Array Buffer Overflow Vulnerability
|
|
5. BIND Negative Cache Poisoning Vulnerability
|
|
6. ISC BIND Multiple Vulnerabilities
|
|
7. BIND serious remote vulnerabilities
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
