The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

Subscriptions

Vendors Products

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837 cve-icon cve-icon
http://secunia.com/advisories/26629 cve-icon cve-icon
http://secunia.com/advisories/26858 cve-icon cve-icon
http://secunia.com/advisories/27433 cve-icon cve-icon
http://secunia.com/advisories/27459 cve-icon cve-icon
http://secunia.com/advisories/27465 cve-icon cve-icon
http://secunia.com/advisories/27696 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm cve-icon cve-icon
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968 cve-icon cve-icon
http://www.ciac.org/ciac/bulletins/r-333.shtml cve-icon cve-icon
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php cve-icon cve-icon
http://www.kb.cert.org/vuls/id/927905 cve-icon cve-icon
http://www.securityfocus.com/archive/1/477870/100/100/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/481424/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/481659/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/25459 cve-icon cve-icon
http://www.securitytracker.com/id?1018615 cve-icon cve-icon
http://www.trusteer.com/docs/bind8dns.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/2991 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3192 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3639 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3668 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3936 cve-icon cve-icon
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf cve-icon cve-icon
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154 cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-08-07T13:57:54.637Z

Reserved: 2007-05-30T00:00:00.000Z

Link: CVE-2007-2930

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-09-12T01:17:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2930

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses