PT-2007-7476 · Isc+3 · Liblwres9+11

Published 1970-01-01 · Updated 2024-06-15 · CVE-2007-2926

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions through 9.5.0a5 libdns16 (affected versions not specified) libdns22 (affected versions not specified) libisccc0 (affected versions not specified) libisccfg0 (affected versions not specified) libisccfg1 (affected versions not specified) liblwres1 (affected versions not specified) liblwres9 (affected versions not specified) nss lwres (affected versions not specified)

Description The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux and openSUSE operating systems, which can lead to a breach of protected information integrity. These vulnerabilities can be exploited remotely. Specifically, ISC BIND 9 uses a weak random number generator during the generation of DNS query ids, making it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Recommendations For ISC BIND 9 versions through 9.5.0a5, update to a version that uses a secure random number generator. For libdns16, consider disabling the package until a patch is available. For libdns22, consider disabling the package until a patch is available. For libisccc0, consider disabling the package until a patch is available. For libisccfg0, consider disabling the package until a patch is available. For libisccfg1, consider disabling the package until a patch is available. For liblwres1, consider disabling the package until a patch is available. For liblwres9, consider disabling the package until a patch is available. For nss lwres, consider disabling the package until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-01603

BDU:2015-01604

BDU:2015-01605

BDU:2015-01606

BDU:2015-01607

BDU:2015-02599

BDU:2015-02600

BDU:2015-02601

BDU:2015-02602

BDU:2015-04654

BDU:2015-04971

CVE-2007-2926

DSA-1341-2

HPSBUX02251

OPENSUSE-SU-2024:10650-1

RHSA-2007:0740

RHSA-2007_0740

Affected Products

Debian

Isc Bind 9

Red Hat

Libdns16

Libdns22

Libisccc0

Libisccfg0

Libisccfg1

Liblwres1

Liblwres9

Nss Lwres

Opensuse

References · 122

• 🔥 https://exploit-db.com/exploits/4266 · Exploit
• http://novell.com/linux/security/advisories/2007_47_bind.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0740.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01606 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02599 · Security Note
• https://bdu.fstec.ru/vul/2015-02600 · Security Note
• https://bdu.fstec.ru/vul/2015-01605 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-2926 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:149 · Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02601 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200708-13.xml · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 · Security Note