NVD

Id
55529  
Name
CVE-2007-3377  
Description
Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-25  
Modified Date
2012-10-30  
Seq
2007-3377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282154 55529 CVE-2007-3377 20070701-01-P  View
282155 55529 CVE-2007-3377 oval:org.mitre.oval:def:9904  View
282156 55529 CVE-2007-3377 http://rt.cpan.org/Public/Bug/Display.html?id=23961  View
282157 55529 CVE-2007-3377 http://support.avaya.com/elmodocs2/security/ASA-2007-351.htm  View
282158 55529 CVE-2007-3377 DSA-1515  View
282159 55529 CVE-2007-3377 GLSA-200708-06  View
282160 55529 CVE-2007-3377 MDKSA-2007:146  View
282161 55529 CVE-2007-3377 http://www.net-dns.org/docs/Changes.html  View
282162 55529 CVE-2007-3377 http://www.nntp.perl.org/group/perl.qpsmtpd/2006/03/msg4810.html  View
282163 55529 CVE-2007-3377 SUSE-SR:2007:017  View
282164 55529 CVE-2007-3377 RHSA-2007:0674  View
282165 55529 CVE-2007-3377 RHSA-2007:0675  View
282166 55529 CVE-2007-3377 20070717 rPSA-2007-0142-1 perl-Net-DNS  View
282167 55529 CVE-2007-3377 24669  View
282168 55529 CVE-2007-3377 1018377  View
282169 55529 CVE-2007-3377 2007-0023  View
282170 55529 CVE-2007-3377 USN-483-1  View
282171 55529 CVE-2007-3377 netdns-dns-responses-spoofing(35112)  View
282172 55529 CVE-2007-3377 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51849 JVNDB-2007-000512 Perl モジュール Net::DNS の Header.pm における DNS クエリ ID を容易に推測可能な問題 Perl モジュール Net::DNS の Header.pm には DNS クエリ ID が一定に増加する生成方法であり、また、同じ DNS クエリ ID をすべての子プロセスが使用するため、DNS クエリ ID が容易に推測可能な問題が存在します。 CVE-2007-3377 26732 CVE-2007-3377 55529 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000512.html 2007-06-25 2007-07-20 View