Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-4194. PoCs published by Marc Bevand, Julien Desfossez, I)ruid.
AI-analyzed exploit summary This is a functional proof-of-concept exploit for CVE-2008-1447, implementing the Kaminsky DNS cache poisoning attack. It crafts malicious DNS responses to poison a resolver's cache by exploiting predictable transaction IDs and port numbers.
Description
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Exploits (3)
This is a functional proof-of-concept exploit for CVE-2008-1447, implementing the Kaminsky DNS cache poisoning attack. It crafts malicious DNS responses to poison a resolver's cache by exploiting predictable transaction IDs and port numbers.
This exploit leverages the DNS cache poisoning vulnerability (CVE-2008-1447) by brute-forcing transaction IDs to inject a malicious DNS record into a vulnerable DNS server. It uses Scapy to craft and send spoofed DNS responses.
This exploit targets the Kaminsky DNS Cache Poisoning flaw (CVE-2008-1447) by injecting malicious DNS records into a vulnerable DNS resolver. It replaces legitimate nameservers for a target domain with attacker-controlled ones via spoofed DNS responses.