NVD

Id
3767  
Name
CVE-2008-3905  
Description
resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-04  
Modified Date
2011-03-07  
Seq
2008-3905  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23820 3767 CVE-2008-3905 oval:org.mitre.oval:def:10034  View
23821 3767 CVE-2008-3905 GLSA-200812-17  View
23822 3767 CVE-2008-3905 SSA:2008-334-01  View
23823 3767 CVE-2008-3905 http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm  View
23824 3767 CVE-2008-3905 DSA-1651  View
23825 3767 CVE-2008-3905 DSA-1652  View
23826 3767 CVE-2008-3905 [oss-security] 20080903 CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb)  View
23827 3767 CVE-2008-3905 [oss-security] 20080904 Re: CVE Request (ruby -- DNS spoofing vulnerability  View
23828 3767 CVE-2008-3905 RHSA-2008:0897  View
23829 3767 CVE-2008-3905 http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/  View
23830 3767 CVE-2008-3905 31699  View
23831 3767 CVE-2008-3905 USN-651-1  View
23832 3767 CVE-2008-3905 ADV-2008-2334  View
23833 3767 CVE-2008-3905 ruby-resolv-dns-spoofing(45935)  View
23834 3767 CVE-2008-3905 FEDORA-2008-8738  View
23835 3767 CVE-2008-3905 FEDORA-2008-8736  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46572 JVNDB-2008-001882 Ruby の resolv.rb における DNS レスポンスを偽装される脆弱性 Ruby の resolv.rb には、DNS リクエストに連続したトランザクション ID と一定のソースポートを使用するため、DNS レスポンスを偽装される脆弱性が存在します。 CVE-2008-3905 34018 CVE-2008-3905 3767 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001882.html 2008-09-04 2008-11-20 View