PT-2008-2742 · Netbsd+1 · Netbsd+1

Published 2008-03-04 · Updated 2017-08-08 · CVE-2008-1148

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 through 4.2 NetBSD versions 1.6.2 through 4.0

Description A pseudo-random number generator (PRNG) algorithm, known as "Algorithm A0", is used in certain operating systems, allowing remote attackers to guess sensitive values, such as DNS transaction IDs or IP fragmentation IDs, by observing a sequence of previously generated values. This can be leveraged for attacks like DNS cache poisoning, injection into TCP packets, and OS fingerprinting.

Recommendations For OpenBSD versions 3.5 through 4.2, consider updating to a version that uses a more secure PRNG algorithm. For NetBSD versions 1.6.2 through 4.0, consider updating to a version that uses a more secure PRNG algorithm. As a temporary workaround, consider restricting access to sensitive services that rely on the PRNG algorithm, such as DNS, until a patch is available.

Fix

Related Identifiers

CVE-2008-1148

Affected Products

Netbsd

Openbsd

References · 8

• http://secunia.com/advisories/28819 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1148 · Security Note
• http://securiteam.com/securityreviews/5PP0H0UNGW.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40329 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41157 · Note
• http://securityfocus.com/bid/27647 · Note
• http://trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf · Note
• http://securityfocus.com/archive/1/487658 · Note