CVE-2008-4126
published 2008-09-18CVE-2008-4126: PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS…
PriorityP426medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EPSS
2.19%
80.5th percentile
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | python-dns | <= 2.3.1-4 | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
| debian | python-dns | — | — |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9xp-g2q8-6p6h: PyDNS (aka python-dns) before 2
ghsa_unreviewed·2022-05-02·CVSS 6.8
CVE-2008-4126 [MEDIUM] GHSA-x9xp-g2q8-6p6h: PyDNS (aka python-dns) before 2
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
Red Hat
python-pydns uses insecure DNS source ports
vendor_redhat·2008-09-11·CVSS 6.8
CVE-2008-4126 [MEDIUM] python-pydns uses insecure DNS source ports
python-pydns uses insecure DNS source ports
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
No detection rules found.
No public exploits indexed.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changeloghttp://www.openwall.com/lists/oss-security/2008/09/11/1http://www.openwall.com/lists/oss-security/2008/09/16/4http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changeloghttp://www.openwall.com/lists/oss-security/2008/09/11/1http://www.openwall.com/lists/oss-security/2008/09/16/4
2008-09-18
Published