PT-2009-1240 · Dj Bernstein · Djbdns

Published 2009-02-19 · Updated 2017-08-08 · CVE-2008-4392

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions djbdns version 1.05

Description The issue allows remote attackers to spoof DNS responses more easily due to the lack of prevention of simultaneous identical outbound DNS queries. This can be demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.

Recommendations For djbdns version 1.05, consider implementing a mechanism to prevent simultaneous identical outbound DNS queries as a mitigation measure until a patch is available.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2008-4392

Affected Products

Djbdns

References · 13

• https://osv.dev/vulnerability/UBUNTU-CVE-2008-4392 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4392 · Security Note
• http://secunia.com/advisories/33855 · Vendor Advisory
• https://ubuntu.com/security/CVE-2008-4392 · Vendor Advisory
• http://your.org/dnscache/djbdns.pdf · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-4392 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-4392 · Vendor Advisory
• http://your.org/dnscache · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4392 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2008-4392 · Security Note
• http://cr.yp.to/djbdns/forgery.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48807 · Note
• http://securityfocus.com/bid/33818 · Note