CVEvulnerability

CVE-2000-0335

7.5 HIGH Published 2000-05-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-05-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.

Affected configurations

• gnu glibc 2.0 • gnu glibc 2.1 • gnu glibc 2.1.1 • gnu glibc 2.1.2 • gnu glibc 2.1.3 • isc bind 8.2 • isc bind 8.2.1 • isc bind 8.2.2

Related

Referenced by CWE · observed example (2)

  • CWE-341 Predictable from Observable State weakness
  • CWE-342 Predictable Exact Value from Previous Values weakness

References