PT-2008-6940 · Microsoft+3 · Dns+8

Published 1970-01-01 · Updated 2020-03-24 · CVE-2008-1447

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions selinux-policy-refpolicy-targeted versions (affected versions not specified) BIND versions prior to 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1 Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 selinux-policy-targeted-1.17.30 selinux-policy-mls-2.4.6 selinux-policy-refpolicy-dev versions (affected versions not specified) selinux-policy-2.4.6 selinux-policy-devel-2.4.6 selinux-policy-refpolicy-strict versions (affected versions not specified) selinux-policy-targeted-2.4.6 selinux-policy-targeted-sources-1.17.30 selinux-policy-refpolicy-src versions (affected versions not specified) selinux-policy-strict-2.4.6 selinux-policy-refpolicy-doc versions (affected versions not specified) Multiple Cisco products (affected versions not specified)

Description The issue concerns multiple vulnerabilities in various software packages, including selinux-policy and DNS implementations, which can lead to disruption of data integrity and availability. These vulnerabilities can be exploited remotely. The DNS protocol vulnerability, in particular, allows remote attackers to spoof DNS traffic via a birthday attack, conducting cache poisoning against recursive resolvers due to insufficient randomness of DNS transaction IDs and source ports.

Recommendations For selinux-policy-refpolicy-targeted, update to a version that addresses the vulnerabilities. For BIND, update to version 9.5.0-P1, 9.4.2-P1, or 9.3.5-P1 or later. For Microsoft DNS, apply the relevant security patches for Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2. For selinux-policy-targeted-1.17.30, selinux-policy-mls-2.4.6, selinux-policy-2.4.6, selinux-policy-devel-2.4.6, selinux-policy-targeted-2.4.6, selinux-policy-targeted-sources-1.17.30, and selinux-policy-strict-2.4.6, update to a version that addresses the vulnerabilities. For Cisco products, apply the software updates released by Cisco. At the moment, there is no information about a newer version that contains a fix for selinux-policy-refpolicy-dev, selinux-policy-refpolicy-strict, selinux-policy-refpolicy-src, and selinux-policy-refpolicy-doc.

Exploit

Fix

Weakness Enumeration

CWE-331

Related Identifiers

BDU:2015-03080

BDU:2015-03081

BDU:2015-03082

BDU:2015-03083

BDU:2015-03084

BDU:2015-07756

BDU:2015-07757

BDU:2015-07758

BDU:2015-07759

BDU:2015-07760

BDU:2015-07761

BDU:2015-07762

CVE-2008-1447

DSA-1603-1

DSA-1617-1

DSA-1619-1

DSA-1623-1

DTSA-147-1

HPSBUX02351

OPENSUSE-SU-2024:10612-1

RHSA-2008:0533

RHSA-2008:0789

RHSA-2008_0533

RHSA-2008_0789

Affected Products

Bind

Cisco Ios

Cisco Products

Dns

Red Hat

Windows 2000

Windows Server 2003

Windows Xp

Selinux-Policy

References · 222

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/spoof/dns/bailiwicked_domain.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/spoof/dns/bailiwicked_host.rb · Exploit
• 🔥 https://exploit-db.com/exploits/6122 · Exploit
• 🔥 https://exploit-db.com/exploits/6130 · Exploit
• 🔥 https://exploit-db.com/exploits/6123 · Exploit
• http://secunia.com/advisories/31207 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080708-dns · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07760 · Security Note
• https://osv.dev/vulnerability/CVE-2008-1447 · Vendor Advisory
• http://secunia.com/advisories/31137 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ26668 · Vendor Advisory
• http://secunia.com/advisories/30988 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03081 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:139 · Vendor Advisory