Keep Track of the Latest Vulnerabilities with SecurityTracker!

Home    |    View Topics    |    Search    |    Contact Us    |

SecurityTracker Archives

Sign Up Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary Instant Alerts Buy our Premium Vulnerability Notification Service to receive customized, instant alerts Affiliates Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free! Partners Become a Partner and License Our Database or Notification Service Report a Bug Report a vulnerability that you have found to SecurityTracker bugs @ securitytracker.com

Category:   Application (Generic)  >   BIND Vendors:   ISC (Internet Software Consortium) (Sun Issues Fix) BIND DNS Query Port Entropy Weakness Lets Remote Users Spoof the System SecurityTracker Alert ID:  1020453 SecurityTracker URL:  http://securitytracker.com/id/1020453 CVE Reference:   CVE-2008-1447   (Links to External Site) Updated:  Nov 12 2008 Original Entry Date:  Jul 9 2008 Impact:   Modification of system information Fix Available:  Yes  Vendor Confirmed:  Yes   Version(s): 9.x Description:   A vulnerability was reported in BIND. A remote user can spoof the system. The domain name system (DNS) service does not use sufficiently random UDP sockets to process queries. A remote user can send specially crafted DNS queries and responses to the target service to spoof responses and insert records into the DNS cache. This may cause traffic to be redirected to arbitrary IP addresses specified by the remote user. The vendor indicates that the vulnerability exists in the DNS protocol itself, rather than in any particular vendor's implementation. Systems using BIND as a caching resolver are affected. Some demonstration exploit code is available at: http://www.caughq.org/exploits/CAU-EX-2008-0002.txt http://www.caughq.org/exploits/CAU-EX-2008-0003.txt Dan Kaminsky of IOActive reported this vulnerability. Impact:   A remote user can spoof the DNS service, causing traffic to be redirected to arbitrary hosts. Solution:   Sun has issued a the following fixes. SPARC Platform * Solaris 8 with patch 109326-23 or later * Solaris 9 with patch 112837-15 or later * Solaris 10 with patch 119783-06 or later * OpenSolaris based upon builds snv_95 or later x86 Platform * Solaris 8 with patch 109327-23 or later * Solaris 9 with patch 114265-14 or later * Solaris 10 with patch 119784-06 or later * OpenSolaris based upon builds snv_95 or later The Sun advisories are available at: http://sunsolve.sun.com/search/document.do?assetkey=1-66-239392-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-240048-1 Vendor URL:  www.isc.org/index.pl?/sw/bind/index.php (Links to External Site) Cause:   Randomization error Underlying OS:   UNIX (Solaris - SunOS) Message History:   This archive entry is a follow-up to the message listed below. Jul 8 2008 BIND DNS Query Port Entropy Weakness Lets Remote Users Spoof the System  Source Message Contents Date:  Wed, 9 Jul 2008 14:55:01 -0400 Subject:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-239392-1 Go to the Top of This SecurityTracker Archive Page

Home   |    View Topics   |    Search   |    Contact Us
Copyright 2012, SecurityGlobal.net LLC