CVEvulnerability
CVE-2008-3630
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Description
mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Affected configurations
• apple bonjour 1.0.4
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html Patch
- http://secunia.com/advisories/31822 secunia.com
- http://support.apple.com/kb/HT2990 support.apple.com
- http://www.securityfocus.com/bid/31093 www.securityfocus.com
- http://www.securitytracker.com/id?1020844 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2524 www.vupen.com
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html Patch
- http://secunia.com/advisories/31822 secunia.com
- http://support.apple.com/kb/HT2990 support.apple.com
- http://www.securityfocus.com/bid/31093 www.securityfocus.com
- http://www.securitytracker.com/id?1020844 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2524 www.vupen.com