CVE-2008-4099
published 2008-09-18CVE-2008-4099: PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for…
PriorityP426medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EPSS
2.28%
81.2th percentile
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | python-dns | <= 2.3.1-3 | — |
| debian | python-dns | <= 2.3.1-4 | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | >= 0 < 2.3.1-5 | 2.3.1-5 |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
osv6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9xp-g2q8-6p6h: PyDNS (aka python-dns) before 2
ghsa_unreviewed·2022-05-02·CVSS 6.8
CVE-2008-4126 [MEDIUM] GHSA-x9xp-g2q8-6p6h: PyDNS (aka python-dns) before 2
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
GHSA
GHSA-9547-8gx6-787g: PyDNS (aka python-dns) before 2
ghsa_unreviewed·2022-05-02·CVSS 6.8
CVE-2008-4099 [MEDIUM] GHSA-9547-8gx6-787g: PyDNS (aka python-dns) before 2
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
OSV
CVE-2008-4099: PyDNS (aka python-dns) before 2
osv·2008-09-18·CVSS 6.8
CVE-2008-4099 [MEDIUM] CVE-2008-4099: PyDNS (aka python-dns) before 2
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Red Hat
python-pydns uses insecure DNS source ports
vendor_redhat·2008-09-11·CVSS 6.8
CVE-2008-4126 [MEDIUM] python-pydns uses insecure DNS source ports
python-pydns uses insecure DNS source ports
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
Red Hat
python-PyDNS: insecure DNS transaction ids
vendor_redhat·2008-09-11·CVSS 6.8
CVE-2008-4099 [MEDIUM] python-PyDNS: insecure DNS transaction ids
python-PyDNS: insecure DNS transaction ids
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2008-4099 python-PyDNS: insecure DNS transaction ids
bugzilla·2008-09-18·CVSS 6.8
CVE-2008-4099 [MEDIUM] CVE-2008-4099 python-PyDNS: insecure DNS transaction ids
CVE-2008-4099 python-PyDNS: insecure DNS transaction ids
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use
random source ports or transaction IDs for DNS requests, which makes
it easier for remote attackers to spoof DNS responses, a different
vulnerability than CVE-2008-1447.
Discussion:
Created python-pydns tracking bugs for this issue
Affects: F8 [bug #462765]
Affects: F9 [bug #462766]
Affects: Fdevel [bug #462767]
Affects: epel-5 [bug #462768]
---
Current Fedora and EPEL have 2.3.3, so this is no longer an issue there.
Bugzilla
CVE-2008-4126 python-pydns uses insecure DNS source ports
bugzilla·2008-09-18·CVSS 6.8
CVE-2008-4126 [MEDIUM] CVE-2008-4126 python-pydns uses insecure DNS source ports
CVE-2008-4126 python-pydns uses insecure DNS source ports
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use
random source ports for DNS requests and does not use random
transaction IDs for DNS retries, which makes it easier for remote
attackers to spoof DNS responses, a different vulnerability than
CVE-2008-1447. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2008-4099.
Discussion:
We currently do not ship any PyDNS version affected by the issue described in this CVE - there's either 2.3.0 in F8/F9 that is affected by the original issue (CVE-2008-4099), or 2.3.3 in Rawhide, which contains complete upstream fix.
Hence I'm closing this bug, only original issue needs to be tracked.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changeloghttp://www.openwall.com/lists/oss-security/2008/09/11/1http://www.openwall.com/lists/oss-security/2008/09/16/4http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changeloghttp://www.openwall.com/lists/oss-security/2008/09/11/1http://www.openwall.com/lists/oss-security/2008/09/16/4
2008-09-18
Published