CVE-2007-2930

ISC BIND <8.4.7-P1 - Info Disclosure

Title source: llm

Description

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Amit Klein · perlremotelinux

https://www.exploit-db.com/exploits/30536

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Amit Klein · perlremotelinux

https://www.exploit-db.com/exploits/30535

View Code ZIP pw:eip

References (28)

[Various Sources] http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf

[Various Sources] http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm

[Vendor Advisory] http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1

[Various Sources] http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/3936

[Third Party Advisory] http://secunia.com/advisories/27433

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/481424/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/3192

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2991

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837

[Third Party Advisory] http://secunia.com/advisories/26629

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018615

[Various Sources] http://www.trusteer.com/docs/bind8dns.html

[Third Party Advisory] http://secunia.com/advisories/27459

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25459

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/3668

[Third Party Advisory] http://secunia.com/advisories/27696

[Patch] http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/477870/100/100/threaded

... and 8 more

Scores

EPSS 0.1765

EPSS Percentile 95.1%

Details

Status published

Products (1)

isc/bind < 8.4.7

Published Sep 12, 2007

Tracked Since Feb 18, 2026