CVE-2008-4100 | BDVDB-2026-32436 Detail

Description#

GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12008-09-18Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.