Lucene search
RedHatRHSA-2008:0789HistoryAug 11, 2008 - 12:00 a.m.
(RHSA-2008:0789) Moderate: dnsmasq security update
2008-08-1100:00:00
access.redhat.com
32
0.133 Low
EPSS
Percentile
95.6%
Dnsmasq is lightweight DNS forwarder and DHCP server. It is designed to
provide DNS and, optionally, DHCP, to a small network.
The dnsmasq DNS resolver used a fixed source UDP port. This could have made
DNS spoofing attacks easier. dnsmasq has been updated to use random UDP
source ports, helping to make DNS spoofing attacks harder. (CVE-2008-1447)
All dnsmasq users are advised to upgrade to this updated package, that
upgrades dnsmasq to version 2.45, which resolves this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | i386 | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.i386.rpm |
| RedHat | 5 | ia64 | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.ia64.rpm |
| RedHat | 5 | s390x | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.s390x.rpm |
| RedHat | 5 | ppc | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.ppc.rpm |
| RedHat | 5 | src | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.src.rpm |
| RedHat | 5 | x86_64 | dnsmasq | < 2.45-1.el5_2.1 | dnsmasq-2.45-1.el5_2.1.x86_64.rpm |
Related
nessus
nessus
Fedora 9 : dnsmasq-2.45-1.fc9 (2009-1069)
2009-02-17 00:00:00
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2008:0533)
2008-07-10 00:00:00
Debian DSA-1604-1 : bind - DNS cache poisoning
2008-07-10 00:00:00
gentoo
gentoo
BIND: Cache poisoning
2008-07-11 00:00:00
dnsmasq: Denial of Service and DNS spoofing
2008-09-04 00:00:00
pdnsd: Denial of Service and cache poisoning
2009-01-11 00:00:00
packetstorm
packetstorm
bind9x-poison.txt
2008-07-25 00:00:00
bailiwicked_domain.rb.txt
2008-07-24 00:00:00
bailiwicked_host.rb.txt
2008-07-24 00:00:00
openvas
openvas
Debian Security Advisory DSA 1603-1 (bind9)
2008-07-15 00:00:00
Fedora Core 9 FEDORA-2009-1069 (dnsmasq)
2009-02-18 00:00:00
SLES10: Security update for bind
2009-10-13 00:00:00
debian
debian
[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
2008-07-25 06:29:36
[SECURITY] [DSA-1619-2] New python-dns package fixes regression
2008-09-22 06:12:09
[SECURITY] [DSA-1619-2] New python-dns package fixes regression
2008-09-22 06:12:09
checkpoint_advisories
checkpoint_advisories
altlinux
altlinux
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
2008-06-06 00:00:00
Security fix for the ALT Linux 5 package ruby version 1.8.7-alt6
2008-08-12 00:00:00
Security fix for the ALT Linux 5 package bind version 9.3.5-alt2
2008-06-06 00:00:00
ubuntucve
ubuntucve
osv
osv
bind9 - cache poisoning
2008-07-08 00:00:00
refpolicy - incompatible policy
2008-07-25 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9
2009-02-14 22:11:22
[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9
2008-07-09 21:45:32
[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9
2009-01-15 02:51:25
cvelist
cvelist
suse
suse
DNS cache poisoning in bind
2008-07-11 09:57:52
debiancve
debiancve
slackware
slackware
[slackware-security] bind
2008-07-10 04:29:01
[slackware-security] ruby
2008-11-29 21:37:03
[slackware-security] dnsmasq
2008-07-24 00:02:47
freebsd_advisory
freebsd_advisory
FreeBSD-SA-08:06.bind
2008-07-13 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
2008-07-29 00:00:00
CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
2008-07-25 00:00:00
ubuntu
ubuntu
Bind vulnerability
2008-07-08 00:00:00
Dnsmasq vulnerability
2008-07-22 00:00:00
seebug
seebug
BIND 9.4.1-9.4.2 - Remote DNS Cache Poisoning Flaw Exploit (meta)
2014-07-01 00:00:00
BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)
2008-07-24 00:00:00
BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (py)
2008-07-24 00:00:00
cve
cve
freebsd
freebsd
FreeBSD -- DNS cache poisoning
2008-07-08 00:00:00
ruby -- DNS spoofing vulnerability
2008-08-08 00:00:00
oraclelinux
oraclelinux
dnsmasq security update
2008-08-11 00:00:00
bind security update
2008-07-08 00:00:00
exploitpack
exploitpack
BIND 9.x - Remote DNS Cache Poisoning
2008-07-25 00:00:00
BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
2008-07-23 00:00:00
BIND 9.x - Remote DNS Cache Poisoning (Python)
2008-07-24 00:00:00
prion
prion
redhat
redhat
(RHSA-2008:0533) Important: bind security update
2008-07-08 00:00:00
f5
f5
K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2013-03-19 00:00:00
SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
2008-07-10 00:00:00
checkpoint_security
checkpoint_security
Check Point response to DNS poisoning vulnerability CVE-2008-1447
2008-07-05 21:00:00
nvd
nvd
centos
centos
bind security update
2008-07-09 01:20:56
bind, caching, selinux security update
2008-07-08 22:25:27
rubygems
rubygems
ruby -- DNS spoofing vulnerability in resolv.rb
2008-05-04 20:00:00
mskb
mskb
MS08-037: Vulnerabilities in DNS could allow spoofing
2018-04-17 19:03:20
exploitdb
exploitdb
BIND 9.4.1 < 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
2008-07-23 00:00:00