CVE-2008-1447

60Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 95%

de la publicación al arma6254 días

Publicada en NVD8 jul

1ª PoC+6254d

metasploit+13d

probabilidad de explotación

95%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

4 exploit(s) público(s)

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."

Productos afectados

n/a · n/a

PoCs públicas encontradas — 4✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6122 cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6130 cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6123 githubgithub.com/hamlasiraj/metasploit-bailiwicked_domain-fix★ 1

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html