CVEvulnerability
CVE-2007-3377
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.
Affected configurations
• nlnet labs net dns 0.14
• nlnet labs net dns 0.20
• nlnet labs net dns 0.21
• nlnet labs net dns 0.22
• nlnet labs net dns 0.23
• nlnet labs net dns 0.24
• nlnet labs net dns 0.25
• nlnet labs net dns 0.26
• nlnet labs net dns 0.27
• nlnet labs net dns 0.28
• nlnet labs net dns 0.29
• nlnet labs net dns 0.30
• nlnet labs net dns 0.31
• nlnet labs net dns 0.32
• nlnet labs net dns 0.33
• nlnet labs net dns 0.34
• nlnet labs net dns 0.34 02
• nlnet labs net dns 0.34 03
• nlnet labs net dns 0.35
• nlnet labs net dns 0.36
• nlnet labs net dns 0.37
• nlnet labs net dns 0.38
• nlnet labs net dns 0.38 01
• nlnet labs net dns 0.38 02
• nlnet labs net dns 0.39
• nlnet labs net dns 0.39 01
• nlnet labs net dns 0.39 02
• nlnet labs net dns 0.40
• nlnet labs net dns 0.40 01
• nlnet labs net dns 0.41
• nlnet labs net dns 0.42
• nlnet labs net dns 0.42 01
• nlnet labs net dns 0.42 02
• nlnet labs net dns 0.43
• nlnet labs net dns 0.44
• nlnet labs net dns 0.44 01
• nlnet labs net dns 0.44 02
• nlnet labs net dns 0.45
• nlnet labs net dns 0.45 01
• nlnet labs net dns 0.46
• nlnet labs net dns 0.47
• nlnet labs net dns 0.47 01
• nlnet labs net dns 0.48
• nlnet labs net dns 0.48 01
• nlnet labs net dns 0.48 02
• nlnet labs net dns 0.48 03
• nlnet labs net dns 0.49
• nlnet labs net dns 0.49 01
• nlnet labs net dns 0.49 02
• nlnet labs net dns 0.49 03
• nlnet labs net dns 0.50
• nlnet labs net dns 0.51
• nlnet labs net dns 0.51 01
• nlnet labs net dns 0.51 02
• nlnet labs net dns 0.52
• nlnet labs net dns 0.53
• nlnet labs net dns 0.53 01
• nlnet labs net dns 0.53 02
• nlnet labs net dns 0.54
• nlnet labs net dns 0.55
… and 4 more
References
- ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc patches.sgi.com
- http://osvdb.org/37053 osvdb.org
- http://rt.cpan.org/Public/Bug/Display.html?id=23961 rt.cpan.org
- http://secunia.com/advisories/25829 secunia.com
- http://secunia.com/advisories/26012 secunia.com
- http://secunia.com/advisories/26014 secunia.com
- http://secunia.com/advisories/26055 secunia.com
- http://secunia.com/advisories/26075 secunia.com
- http://secunia.com/advisories/26211 secunia.com
- http://secunia.com/advisories/26231 secunia.com
- http://secunia.com/advisories/26417 secunia.com
- http://secunia.com/advisories/26508 secunia.com
- http://secunia.com/advisories/26543 secunia.com
- http://secunia.com/advisories/29354 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-351.htm support.avaya.com
- http://www.debian.org/security/2008/dsa-1515 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:146 www.mandriva.com
- http://www.net-dns.org/docs/Changes.html www.net-dns.org
- http://www.nntp.perl.org/group/perl.qpsmtpd/2006/03/msg4810.html Exploit
- http://www.novell.com/linux/security/advisories/2007_17_sr.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0674.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0675.html www.redhat.com
- http://www.securityfocus.com/archive/1/473871/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24669 www.securityfocus.com
- http://www.securitytracker.com/id?1018377 www.securitytracker.com
- http://www.trustix.org/errata/2007/0023/ www.trustix.org
- http://www.ubuntu.com/usn/usn-483-1 www.ubuntu.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35112 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9904 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc patches.sgi.com
- http://osvdb.org/37053 osvdb.org
- http://rt.cpan.org/Public/Bug/Display.html?id=23961 rt.cpan.org
- http://secunia.com/advisories/25829 secunia.com
- http://secunia.com/advisories/26012 secunia.com
- http://secunia.com/advisories/26014 secunia.com
- http://secunia.com/advisories/26055 secunia.com
- http://secunia.com/advisories/26075 secunia.com
- http://secunia.com/advisories/26211 secunia.com
- http://secunia.com/advisories/26231 secunia.com
- http://secunia.com/advisories/26417 secunia.com
- http://secunia.com/advisories/26508 secunia.com
- http://secunia.com/advisories/26543 secunia.com
- http://secunia.com/advisories/29354 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-351.htm support.avaya.com
- http://www.debian.org/security/2008/dsa-1515 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:146 www.mandriva.com
- http://www.net-dns.org/docs/Changes.html www.net-dns.org
- http://www.nntp.perl.org/group/perl.qpsmtpd/2006/03/msg4810.html Exploit
- http://www.novell.com/linux/security/advisories/2007_17_sr.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0674.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0675.html www.redhat.com
- http://www.securityfocus.com/archive/1/473871/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24669 www.securityfocus.com
- http://www.securitytracker.com/id?1018377 www.securitytracker.com
- http://www.trustix.org/errata/2007/0023/ www.trustix.org
- http://www.ubuntu.com/usn/usn-483-1 www.ubuntu.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35112 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9904 oval.cisecurity.org