PT-2008-2741 · Freebsd+3 · Freebsd+3

Amit Klein · Published 2008-03-04 · Updated 2017-08-08 · CVE-2008-1147

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD versions 2.6 through 3.4 Mac OS X versions 10 through 10.5.1 FreeBSD versions 4.4 through 7.0 DragonFlyBSD versions 1.0 through 1.10.1

Description A pseudo-random number generator (PRNG) algorithm, known as "Algorithm X2", is used in various operating systems. This algorithm allows remote attackers to guess sensitive values, such as IP fragmentation IDs, by observing a sequence of previously generated values. This issue can be leveraged for attacks, including injection into TCP packets and OS fingerprinting.

Recommendations For OpenBSD versions 2.6 through 3.4, update to a version that uses a secure PRNG algorithm. For Mac OS X versions 10 through 10.5.1, update to a version that uses a secure PRNG algorithm. For FreeBSD versions 4.4 through 7.0, update to a version that uses a secure PRNG algorithm. For DragonFlyBSD versions 1.0 through 1.10.1, update to a version that uses a secure PRNG algorithm.

Fix

Related Identifiers

CVE-2008-1147

Affected Products

Dragonflybsd

Freebsd

Macos X

Openbsd

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2008-1147 · Security Note
• http://secunia.com/advisories/28819 · Vendor Advisory
• http://seclists.org/bugtraq/2008/Feb/0052.html · Note
• http://seclists.org/bugtraq/2008/Feb/0063.html · Note
• http://securiteam.com/securityreviews/5PP0H0UNGW.html · Note
• http://freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c?rev=1.10%3Bcontenttype= · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40329 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41155 · Note
• http://securityfocus.com/bid/27647 · Note
• http://trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf · Note
• http://securityfocus.com/archive/1/487658 · Note