NVD

Id
55089  
Name
CVE-2007-2930  
Description
The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-11  
Modified Date
2011-03-07  
Seq
2007-2930  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279895 55089 CVE-2007-2930 SSRT071461  View
279896 55089 CVE-2007-2930 oval:org.mitre.oval:def:2154  View
279897 55089 CVE-2007-2930 103063  View
279898 55089 CVE-2007-2930 200859  View
279899 55089 CVE-2007-2930 http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm  View
279900 55089 CVE-2007-2930 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968  View
279901 55089 CVE-2007-2930 R-333  View
279902 55089 CVE-2007-2930 http://www.isc.org/index.pl?/sw/bind/bind8-eol.php  View
279903 55089 CVE-2007-2930 VU#927905  View
279904 55089 CVE-2007-2930 20070827 BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)  View
279905 55089 CVE-2007-2930 20071001 Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)  View
279906 55089 CVE-2007-2930 20071006 Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)  View
279907 55089 CVE-2007-2930 25459  View
279908 55089 CVE-2007-2930 1018615  View
279909 55089 CVE-2007-2930 http://www.trusteer.com/docs/bind8dns.html  View
279910 55089 CVE-2007-2930 ADV-2007-2991  View
279911 55089 CVE-2007-2930 ADV-2007-3192  View
279912 55089 CVE-2007-2930 ADV-2007-3639  View
279913 55089 CVE-2007-2930 ADV-2007-3668  View
279914 55089 CVE-2007-2930 ADV-2007-3936  View
279915 55089 CVE-2007-2930 http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf  View
279916 55089 CVE-2007-2930 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51971 JVNDB-2007-000634 BIND8 の乱数生成に脆弱性 BIND8 には、生成する ID 情報が推測されやすい乱数になっているためキャッシュ汚染を引き起こされる可能性があります。 CVE-2007-2930 26285 CVE-2007-2930 55089 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000634.html 2007-08-29 2007-12-11 View