PT-2008-2742 · Netbsd+1 · Netbsd+1

Publicado 2008-03-04 · Atualizado 2017-08-08 · CVE-2008-1148

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 through 4.2 NetBSD versions 1.6.2 through 4.0

Description A pseudo-random number generator (PRNG) algorithm, known as "Algorithm A0", is used in certain operating systems, allowing remote attackers to guess sensitive values, such as DNS transaction IDs or IP fragmentation IDs, by observing a sequence of previously generated values. This can be leveraged for attacks like DNS cache poisoning, injection into TCP packets, and OS fingerprinting.

Recommendations For OpenBSD versions 3.5 through 4.2, consider updating to a version that uses a more secure PRNG algorithm. For NetBSD versions 1.6.2 through 4.0, consider updating to a version that uses a more secure PRNG algorithm. As a temporary workaround, consider restricting access to sensitive services that rely on the PRNG algorithm, such as DNS, until a patch is available.

Correção

Identificadores relacionados

CVE-2008-1148

Produtos afetados

Netbsd

Openbsd

Referências · 8

• http://securiteam.com/securityreviews/5PP0H0UNGW.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40329 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41157 · Nota
• http://securityfocus.com/bid/27647 · Nota
• http://trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf · Nota
• http://secunia.com/advisories/28819 · Aviso do Fabricante
• http://securityfocus.com/archive/1/487658 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1148 · Nota de Segurança