Security Advisory

CVE-2007-2926

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-07-24 17:00:00

Last updated 2024-08-07 13:57:54

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

← Browse all CVEs View on cve.org ↗