CVE-2007-2926
Summary
| CVE | CVE-2007-2926 |
|---|---|
| State | PUBLISHED |
| Assigner | certcc |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-07-24 17:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning. |
Risk And Classification
Primary CVSS: v2.0 4.3 from [email protected]
AV:N/AC:M/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Isc | Bind | 9.0 | All | All | All |
| Application | Isc | Bind | 9.1 | All | All | All |
| Application | Isc | Bind | 9.2 | All | All | All |
| Application | Isc | Bind | 9.3 | All | All | All |
| Application | Isc | Bind | 9.4 | All | All | All |
| Application | Isc | Bind | 9.5 | All | All | All |
| Application | Isc | Bind | 9.5.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Debian update for bind - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| www.trustix.org/errata/2007/0023 | af854a3a-2127-422b-91ae-364da2661108 | www.trustix.org | |
| Avaya Products BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc | af854a3a-2127-422b-91ae-364da2661108 | security.freebsd.org | |
| OpenPKG Corporation: Security: Security Advisories | af854a3a-2127-422b-91ae-364da2661108 | www.openpkg.com | |
| US-CERT Vulnerability Note VU#252735 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| ASA-2007-389 (RHSA-2007-0740) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| SecuriTeam - BIND 9 DNS Cache Poisoning | af854a3a-2127-422b-91ae-364da2661108 | www.securiteam.com | |
| ISC has a new website | Internet Systems Consortium | af854a3a-2127-422b-91ae-364da2661108 | www.isc.org | |
| Slackware update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| #201539: Security Vulnerability in Solaris 10 BIND: Susceptible to Cache Poisoning Attack | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| Advisories | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Ubuntu update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| About the security content of Mac OS X 10.4.11 and Security Update 2007-008 | af854a3a-2127-422b-91ae-364da2661108 | docs.info.apple.com | |
| HP TCP/IP Services for OpenVMS BIND Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Nortel Products BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Mandriva update for bind - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Red Hat update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | |
| US-CERT Technical Cyber Security Alert TA07-319A -- Apple Updates for Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| Security Announcement | af854a3a-2127-422b-91ae-364da2661108 | www.novell.com | |
| IBM Security Trusteer Fraud Protection Software | IBM | af854a3a-2127-422b-91ae-364da2661108 | www.trusteer.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| USN-491-1: Bind vulnerability | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| SecurityTracker.com Archives - BIND Generates Predictable Query IDs That May Facilitate Cache Poisoning Attacks | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Trustix Update for Multiple Packages - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| The Slackware Linux Project: Slackware Security Advisories | af854a3a-2127-422b-91ae-364da2661108 | www.slackware.org | |
| IBM AIX BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| HP-UX update for Bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Sun Solaris BIND Predictable DNS Query IDs Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| '[security bulletin] HPSBOV03226 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Multiple Re' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Apple Mac OS X v10.4.11 2007-008 Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| ISC BIND 9 Remote Cache Poisoning Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| aix.software.ibm.com/aix/efixes/security/README | af854a3a-2127-422b-91ae-364da2661108 | aix.software.ibm.com | |
| Debian -- Security Information -- DSA-1341-2 bind9 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| rPath update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| FreeBSD update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM Search results - United States | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| APPLE-SA-2007-11-14 Mac OS X v10.4.11 and Security Update 2007-008 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| IBM Search results - United States | af854a3a-2127-422b-91ae-364da2661108 | www-1.ibm.com | |
| Nortel: Technical Support: Nortel Response to ISC:DNS:BIND 9 Vulnerabilities in Default ACL and Weak Query IDs | af854a3a-2127-422b-91ae-364da2661108 | support.nortel.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| patches.sgi.com/support/free/security/advisories/20070801-01-P.asc | af854a3a-2127-422b-91ae-364da2661108 | patches.sgi.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| SUSE update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo update for bind - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| HP Tru64 UNIX BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| issues.rpath.com/browse/RPL-1587 | af854a3a-2127-422b-91ae-364da2661108 | issues.rpath.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM Security Trusteer Fraud Protection Software | IBM | af854a3a-2127-422b-91ae-364da2661108 | www.trusteer.com | |
| Gentoo Linux Documentation -- BIND: Weak random number generation | af854a3a-2127-422b-91ae-364da2661108 | www.gentoo.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2008-03-28 | Mark J Cox | Updates are available for Red Hat Enterprise Linux 2.1, 3, 4, and 5 to correct this issue: http://rhn.redhat.com/errata/RHSA-2007-0740.html |
There are currently no legacy QID mappings associated with this CVE.