CVE-2008-4100 Other in n/a
Remote attackers can spoof DNS responses due to predictable transaction IDs and fixed source ports in the adns library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-4100?
CVE-2008-4100 is a medium-severity vulnerability in n/a, published on 18 Sep 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.
Weakness: CWE-16
Which versions are affected by CVE-2008-4100?
It affects 1 product.
Products include Gnu Adns.
How do I fix CVE-2008-4100?
No fix published yet.
Is CVE-2008-4100 being exploited?
There is no known exploitation of CVE-2008-4100 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2008-4100, GHSA-qpj2-q7ff-rjvv.