Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-4126

Опубликовано: 18 сент. 2008
Источник: nvd
CVSS2: 6.4
EPSS Низкий

Описание

PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:debian:python-dns:*:*:*:*:*:*:*:*
Версия до 2.3.1-4 (включая)
cpe:2.3:a:debian:python-dns:2.3.0-1:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-2:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-3:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-4:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-5:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-5.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.0-6:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.1-1:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.1-2:*:*:*:*:*:*:*
cpe:2.3:a:debian:python-dns:2.3.1-3:*:*:*:*:*:*:*
cpe:2.3:a:debian:linux:unknown:unknown:etch:*:*:*:*:*

EPSS

Процентиль: 71%
0.00712
Низкий

6.4 Medium

CVSS2

Дефекты

CWE-16

Связанные уязвимости

ubuntu логотип

CVE-2008-4126

ubuntu
почти 17 лет назад

PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.

redhat логотип

CVE-2008-4126

redhat
около 17 лет назад

PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.

debian логотип

CVE-2008-4126

debian
почти 17 лет назад

PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use ...

github логотип

GHSA-x9xp-g2q8-6p6h

github
больше 3 лет назад

PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.

EPSS

Процентиль: 71%
0.00712
Низкий

6.4 Medium

CVSS2

Дефекты

CWE-16