Lucene search
SuseSUSE-SA:2007:047HistoryAug 01, 2007 - 4:07 p.m.
DNS cache poisoning in bind, bind9
2007-08-0116:07:35
lists.opensuse.org
11
0.233 Low
EPSS
Percentile
96.6%
Amit Klein found that the random number generator used by the BIND name server to compute DNS query IDs generates predictable values. Remote attackers could exploit this flaw to conduct DNS cache poisoning attacks (CVE-2007-2926).
Solution
There is no known workaround, please install the update packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| SUSE Linux Enterprise Server | 10.1 | ia64 | bind-utils | < 9.3.4-1.16 | bind-utils-9.3.4-1.16.ia64.rpm |
| SUSE Linux Enterprise SDK | 10 | i586 | bind | < 9.3.4-1.16 | bind-9.3.4-1.16.i586.rpm |
| openSUSE | 10.1 | x86_64 | bind-utils | < 9.3.2-17.18 | bind-utils-9.3.2-17.18.x86_64.rpm |
| SUSE Linux Enterprise Server | 10.1 | ia64 | bind-libs | < 9.3.4-1.16 | bind-libs-9.3.4-1.16.ia64.rpm |
| SUSE Linux Enterprise Server | 10.1 | ppc | bind-libs | < 9.3.4-1.16 | bind-libs-9.3.4-1.16.ppc.rpm |
| SUSE Linux Enterprise SDK | 10 | s390x | bind | < 9.3.4-1.16 | bind-9.3.4-1.16.s390x.rpm |
| openSUSE | 10.0 | ppc | bind-libs | < 9.3.2-56.3 | bind-libs-9.3.2-56.3.ppc.rpm |
| SUSE Linux Enterprise SDK | 10 | x86_64 | bind | < 9.3.4-1.16 | bind-9.3.4-1.16.x86_64.rpm |
| openSUSE | 10.2 | x86_64 | bind | < 9.3.2-56.3 | bind-9.3.2-56.3.x86_64.rpm |
| openSUSE | 10.1 | i586 | bind | < 9.3.2-17.18 | bind-9.3.2-17.18.i586.rpm |
Related
nessus
nessus
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2007:0740)
2007-07-27 00:00:00
Debian DSA-1341-2 : bind9 - design error
2007-08-13 00:00:00
openvas
openvas
FreeBSD Ports: named
2008-09-04 00:00:00
HP-UX Update for BIND HPSBUX02251
2009-05-05 00:00:00
Debian Security Advisory DSA 1342-2 (bind9)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1342-2] New bind9 packages fix DNS cache poisoning
2007-07-26 17:03:40
[SECURITY] [DSA 1341-1] New bind9 packages fix DNS cache poisoning
2007-07-25 21:13:15
altlinux
altlinux
Security fix for the ALT Linux 6 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 5 package bind version 9.3.4-alt4
2007-07-24 00:00:00
Security fix for the ALT Linux 9 package bind version 9.3.4-alt4
2007-07-24 00:00:00
nvd
nvd
CVE-2007-2926
2007-07-24 17:30:00
CVE-2007-2930
2007-09-12 01:17:00
oraclelinux
oraclelinux
Moderate: bind security update
2007-07-24 00:00:00
cert
cert
ISC BIND generates cryptographically weak DNS query IDs
2007-07-27 00:00:00
cve
cve
CVE-2007-2926
2007-07-24 17:30:00
CVE-2007-2930
2007-09-12 01:17:00
freebsd
freebsd
FreeBSD -- Predictable query ids in named(8)
2007-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: bind-9.3.4-7.P1.fc6
2007-07-26 15:35:49
[SECURITY] Fedora 7 Update: bind-9.4.1-7.P1.fc7
2007-07-25 05:15:35
[SECURITY] Fedora 7 Update: bind-9.4.2-2.fc7
2007-12-20 20:14:27
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against ISC BIND Cache Poisoning Vulnerability
2007-08-16 00:00:00
Security Best Practice: Protect Yourself against DNS Cache Poisoning
2007-08-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:07.bind
2007-08-01 00:00:00
cvelist
cvelist
CVE-2007-2926
2007-07-24 17:00:00
CVE-2007-2930
2007-09-12 01:00:00
ubuntucve
ubuntucve
CVE-2007-2926
2007-07-24 00:00:00
CVE-2007-2930
2007-09-12 00:00:00
redhat
redhat
(RHSA-2007:0740) Moderate: bind security update
2007-07-24 00:00:00
centos
centos
bind, caching security update
2007-07-24 15:48:10
bind security update
2007-07-25 01:16:51
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:41
prion
prion
Design/Logic Flaw
2007-07-24 17:30:00
Code injection
2007-09-12 01:17:00
ubuntu
ubuntu
Bind vulnerability
2007-07-25 00:00:00
debiancve
debiancve
CVE-2007-2926
2007-07-24 17:30:00
osv
osv
bind9 - DNS cache poisoning vulnerability
2007-07-25 00:00:00
slackware
slackware
[slackware-security] bind
2007-07-26 22:15:41
gentoo
gentoo
BIND: Weak random number generation
2007-08-18 00:00:00
redhatcve
redhatcve
CVE-2007-2930
2015-10-30 10:12:39
securityvulns
securityvulns
ertificate spoofing with subjectAltName and domain name wildcards
2007-11-19 00:00:00