{"api_version":"1","generated_at":"2026-07-23T09:36:21+00:00","cve":"CVE-2007-2926","urls":{"html":"https://cve.report/CVE-2007-2926","api":"https://cve.report/api/cve/CVE-2007-2926.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-2926","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-2926"},"summary":{"title":"CVE-2007-2926","description":"ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.","state":"PUBLISHED","assigner":"certcc","published_at":"2007-07-24 17:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2007/2782","name":"http://www.vupen.com/english/advisories/2007/2782","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26180","name":"http://secunia.com/advisories/26180","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for bind - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trustix.org/errata/2007/0023/","name":"http://www.trustix.org/errata/2007/0023/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/26847","name":"http://secunia.com/advisories/26847","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Avaya Products BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc","name":"http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html","name":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenPKG Corporation: Security: Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/252735","name":"http://www.kb.cert.org/vuls/id/252735","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#252735","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://secunia.com/advisories/26607","name":"http://secunia.com/advisories/26607","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0740.html","name":"http://www.redhat.com/support/errata/RHSA-2007-0740.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ASA-2007-389 (RHSA-2007-0740)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html","name":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecuriTeam™ - BIND 9 DNS Cache Poisoning","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","name":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISC has a new website | Internet Systems Consortium","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/26236","name":"http://secunia.com/advisories/26236","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Slackware update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#201539: Security Vulnerability in Solaris 10 BIND: Susceptible to Cache Poisoning Attack","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:149","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:149","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Advisories | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26148","name":"http://secunia.com/advisories/26148","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/474856/100/0/threaded","name":"http://www.securityfocus.com/archive/1/474856/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://docs.info.apple.com/article.html?artnum=307041","name":"http://docs.info.apple.com/article.html?artnum=307041","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About the security content of Mac OS X 10.4.11 and Security Update 2007-008","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/26925","name":"http://secunia.com/advisories/26925","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP TCP/IP Services for OpenVMS BIND Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26515","name":"http://secunia.com/advisories/26515","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Nortel Products BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26227","name":"http://secunia.com/advisories/26227","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mandriva update for bind - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26195","name":"http://secunia.com/advisories/26195","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html","name":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA07-319A -- Apple Updates for Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2007_47_bind.html","name":"http://www.novell.com/linux/security/advisories/2007_47_bind.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.trusteer.com/docs/bind9dns_s.html","name":"http://www.trusteer.com/docs/bind9dns_s.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Security Trusteer Fraud Protection Software  | IBM","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/474516/100/0/threaded","name":"http://www.securityfocus.com/archive/1/474516/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35575","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35575","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-491-1","name":"http://www.ubuntu.com/usn/usn-491-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-491-1: Bind vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1018442","name":"http://www.securitytracker.com/id?1018442","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - BIND Generates Predictable Query IDs That May Facilitate Cache Poisoning Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/2662","name":"http://www.vupen.com/english/advisories/2007/2662","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26231","name":"http://secunia.com/advisories/26231","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trustix Update for Multiple Packages - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/27643","name":"http://secunia.com/advisories/27643","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385","name":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"The Slackware Linux Project: Slackware Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26531","name":"http://secunia.com/advisories/26531","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM AIX BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26330","name":"http://secunia.com/advisories/26330","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP-UX update for Bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26160","name":"http://secunia.com/advisories/26160","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sun Solaris BIND Predictable DNS Query IDs Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26152","name":"http://secunia.com/advisories/26152","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","name":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[security bulletin] HPSBOV03226 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Multiple Re' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/2932","name":"http://www.vupen.com/english/advisories/2007/2932","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26444","name":"http://www.securityfocus.com/bid/26444","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple Mac OS X v10.4.11 2007-008 Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/25037","name":"http://www.securityfocus.com/bid/25037","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISC BIND 9 Remote Cache Poisoning Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"ftp://aix.software.ibm.com/aix/efixes/security/README","name":"ftp://aix.software.ibm.com/aix/efixes/security/README","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"404"},{"url":"http://www.debian.org/security/2007/dsa-1341","name":"http://www.debian.org/security/2007/dsa-1341","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1341-2 bind9","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/474545/100/0/threaded","name":"http://www.securityfocus.com/archive/1/474545/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26217","name":"http://secunia.com/advisories/26217","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"rPath update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26261","name":"http://secunia.com/advisories/26261","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FreeBSD update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only","name":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Search results - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/2914","name":"http://www.vupen.com/english/advisories/2007/2914","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html","name":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2007-11-14 Mac OS X v10.4.11 and Security Update 2007-008","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only","name":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Search results - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903","name":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Nortel: Technical Support: Nortel Response to ISC:DNS:BIND 9 Vulnerabilities in Default ACL and Weak Query IDs","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc","name":"ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2007/3868","name":"http://www.vupen.com/english/advisories/2007/3868","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3242","name":"http://www.vupen.com/english/advisories/2007/3242","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26308","name":"http://secunia.com/advisories/26308","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SUSE update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26509","name":"http://secunia.com/advisories/26509","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo update for bind - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26605","name":"http://secunia.com/advisories/26605","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Tru64 UNIX BIND Predictable DNS Query IDs Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-1587","name":"https://issues.rpath.com/browse/RPL-1587","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2007/2627","name":"http://www.vupen.com/english/advisories/2007/2627","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/474808/100/0/threaded","name":"http://www.securityfocus.com/archive/1/474808/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trusteer.com/docs/bind9dns.html","name":"http://www.trusteer.com/docs/bind9dns.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Security Trusteer Fraud Protection Software  | IBM","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  BIND: Weak random number generation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2926","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2926","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2926","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"isc","cpe5":"bind","cpe6":"9.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2007-2926","organization":"Red Hat","lastmodified":"2008-03-28","contributor":"Mark J Cox","statementText":"Updates are available for Red Hat Enterprise Linux 2.1, 3, 4, and 5 to correct this issue: http://rhn.redhat.com/errata/RHSA-2007-0740.html","cve_year":"2007","cve_id":"2926","crc32":"d2370933"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T13:57:54.738Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.trusteer.com/docs/bind9dns_s.html"},{"name":"26231","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26231"},{"name":"ADV-2007-2932","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2932"},{"name":"HPSBOV03226","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26847","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26847"},{"name":"IZ02218","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only"},{"name":"ADV-2007-2914","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2914"},{"name":"RHSA-2007:0740","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2007-0740.html"},{"name":"26217","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26217"},{"name":"SSRT101004","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26509","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26509"},{"name":"HPSBOV02261","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"},{"name":"26444","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26444"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html"},{"name":"HPSBUX02251","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"26605","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26605"},{"name":"103018","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"},{"name":"MDKSA-2007:149","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"},{"name":"26607","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26607"},{"name":"20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/474856/100/0/threaded"},{"name":"26148","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26148"},{"name":"FreeBSD-SA-07:07","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"},{"name":"VU#252735","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/252735"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.trusteer.com/docs/bind9dns.html"},{"name":"26180","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26180"},{"name":"GLSA-200708-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"},{"name":"26152","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26152"},{"name":"2007-0023","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"],"url":"http://www.trustix.org/errata/2007/0023/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903"},{"name":"SSA:2007-207-01","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"],"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385"},{"name":"APPLE-SA-2007-11-14","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://docs.info.apple.com/article.html?artnum=307041"},{"name":"20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/474516/100/0/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php"},{"name":"IZ02219","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only"},{"name":"isc-bind-queryid-spoofing(35575)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"},{"name":"ADV-2007-2782","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2782"},{"name":"26227","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26227"},{"name":"26261","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26261"},{"name":"ADV-2007-3868","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3868"},{"name":"25037","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25037"},{"name":"26515","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26515"},{"name":"USN-491-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-491-1"},{"name":"26330","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26330"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://issues.rpath.com/browse/RPL-1587"},{"name":"HPSBTU02256","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"},{"name":"1018442","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1018442"},{"name":"20070801-01-P","tags":["vendor-advisory","x_refsource_SGI","x_transferred"],"url":"ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"},{"name":"DSA-1341","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2007/dsa-1341"},{"name":"26308","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26308"},{"name":"SUSE-SA:2007:047","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://www.novell.com/linux/security/advisories/2007_47_bind.html"},{"name":"ADV-2007-2627","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2627"},{"name":"oval:org.mitre.oval:def:2226","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"},{"name":"27643","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27643"},{"name":"26236","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26236"},{"name":"ADV-2007-2662","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2662"},{"name":"26195","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26195"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"ftp://aix.software.ibm.com/aix/efixes/security/README"},{"name":"ADV-2007-3242","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3242"},{"name":"oval:org.mitre.oval:def:10293","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"},{"name":"OpenPKG-SA-2007.022","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred"],"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"},{"name":"TA07-319A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html"},{"name":"26925","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26925"},{"name":"26160","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26160"},{"name":"20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/474545/100/0/threaded"},{"name":"SSRT071449","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/474808/100/0/threaded"},{"name":"26531","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26531"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-07-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-16T14:57:01.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"},{"tags":["x_refsource_MISC"],"url":"http://www.trusteer.com/docs/bind9dns_s.html"},{"name":"26231","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26231"},{"name":"ADV-2007-2932","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2932"},{"name":"HPSBOV03226","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26847","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26847"},{"name":"IZ02218","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only"},{"name":"ADV-2007-2914","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2914"},{"name":"RHSA-2007:0740","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2007-0740.html"},{"name":"26217","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26217"},{"name":"SSRT101004","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26509","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26509"},{"name":"HPSBOV02261","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"},{"name":"26444","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26444"},{"tags":["x_refsource_MISC"],"url":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html"},{"name":"HPSBUX02251","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"26605","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26605"},{"name":"103018","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"},{"name":"MDKSA-2007:149","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"},{"name":"26607","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26607"},{"name":"20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/474856/100/0/threaded"},{"name":"26148","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26148"},{"name":"FreeBSD-SA-07:07","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"},{"name":"VU#252735","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/252735"},{"tags":["x_refsource_MISC"],"url":"http://www.trusteer.com/docs/bind9dns.html"},{"name":"26180","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26180"},{"name":"GLSA-200708-13","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"},{"name":"26152","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26152"},{"name":"2007-0023","tags":["vendor-advisory","x_refsource_TRUSTIX"],"url":"http://www.trustix.org/errata/2007/0023/"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903"},{"name":"SSA:2007-207-01","tags":["vendor-advisory","x_refsource_SLACKWARE"],"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385"},{"name":"APPLE-SA-2007-11-14","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://docs.info.apple.com/article.html?artnum=307041"},{"name":"20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/474516/100/0/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php"},{"name":"IZ02219","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only"},{"name":"isc-bind-queryid-spoofing(35575)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"},{"name":"ADV-2007-2782","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2782"},{"name":"26227","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26227"},{"name":"26261","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26261"},{"name":"ADV-2007-3868","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3868"},{"name":"25037","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25037"},{"name":"26515","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26515"},{"name":"USN-491-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-491-1"},{"name":"26330","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26330"},{"tags":["x_refsource_CONFIRM"],"url":"https://issues.rpath.com/browse/RPL-1587"},{"name":"HPSBTU02256","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"},{"name":"1018442","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1018442"},{"name":"20070801-01-P","tags":["vendor-advisory","x_refsource_SGI"],"url":"ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"},{"name":"DSA-1341","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2007/dsa-1341"},{"name":"26308","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26308"},{"name":"SUSE-SA:2007:047","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://www.novell.com/linux/security/advisories/2007_47_bind.html"},{"name":"ADV-2007-2627","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2627"},{"name":"oval:org.mitre.oval:def:2226","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"},{"name":"27643","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27643"},{"name":"26236","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26236"},{"name":"ADV-2007-2662","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2662"},{"name":"26195","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26195"},{"tags":["x_refsource_CONFIRM"],"url":"ftp://aix.software.ibm.com/aix/efixes/security/README"},{"name":"ADV-2007-3242","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3242"},{"name":"oval:org.mitre.oval:def:10293","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"},{"name":"OpenPKG-SA-2007.022","tags":["vendor-advisory","x_refsource_OPENPKG"],"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"},{"name":"TA07-319A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html"},{"name":"26925","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26925"},{"name":"26160","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26160"},{"name":"20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/474545/100/0/threaded"},{"name":"SSRT071449","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/474808/100/0/threaded"},{"name":"26531","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26531"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2007-2926","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm","refsource":"CONFIRM","url":"http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"},{"name":"http://www.trusteer.com/docs/bind9dns_s.html","refsource":"MISC","url":"http://www.trusteer.com/docs/bind9dns_s.html"},{"name":"26231","refsource":"SECUNIA","url":"http://secunia.com/advisories/26231"},{"name":"ADV-2007-2932","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2932"},{"name":"HPSBOV03226","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26847","refsource":"SECUNIA","url":"http://secunia.com/advisories/26847"},{"name":"IZ02218","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only"},{"name":"ADV-2007-2914","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2914"},{"name":"RHSA-2007:0740","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2007-0740.html"},{"name":"26217","refsource":"SECUNIA","url":"http://secunia.com/advisories/26217"},{"name":"SSRT101004","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2"},{"name":"26509","refsource":"SECUNIA","url":"http://secunia.com/advisories/26509"},{"name":"HPSBOV02261","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"},{"name":"26444","refsource":"BID","url":"http://www.securityfocus.com/bid/26444"},{"name":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html","refsource":"MISC","url":"http://www.securiteam.com/securitynews/5VP0L0UM0A.html"},{"name":"HPSBUX02251","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"26605","refsource":"SECUNIA","url":"http://secunia.com/advisories/26605"},{"name":"103018","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"},{"name":"MDKSA-2007:149","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"},{"name":"26607","refsource":"SECUNIA","url":"http://secunia.com/advisories/26607"},{"name":"20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/474856/100/0/threaded"},{"name":"26148","refsource":"SECUNIA","url":"http://secunia.com/advisories/26148"},{"name":"FreeBSD-SA-07:07","refsource":"FREEBSD","url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"},{"name":"VU#252735","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/252735"},{"name":"http://www.trusteer.com/docs/bind9dns.html","refsource":"MISC","url":"http://www.trusteer.com/docs/bind9dns.html"},{"name":"26180","refsource":"SECUNIA","url":"http://secunia.com/advisories/26180"},{"name":"GLSA-200708-13","refsource":"GENTOO","url":"http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"},{"name":"26152","refsource":"SECUNIA","url":"http://secunia.com/advisories/26152"},{"name":"2007-0023","refsource":"TRUSTIX","url":"http://www.trustix.org/errata/2007/0023/"},{"name":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903","refsource":"CONFIRM","url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903"},{"name":"SSA:2007-207-01","refsource":"SLACKWARE","url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385"},{"name":"APPLE-SA-2007-11-14","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"},{"name":"http://docs.info.apple.com/article.html?artnum=307041","refsource":"CONFIRM","url":"http://docs.info.apple.com/article.html?artnum=307041"},{"name":"20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/474516/100/0/threaded"},{"name":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","refsource":"CONFIRM","url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php"},{"name":"IZ02219","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only"},{"name":"isc-bind-queryid-spoofing(35575)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"},{"name":"ADV-2007-2782","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2782"},{"name":"26227","refsource":"SECUNIA","url":"http://secunia.com/advisories/26227"},{"name":"26261","refsource":"SECUNIA","url":"http://secunia.com/advisories/26261"},{"name":"ADV-2007-3868","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3868"},{"name":"25037","refsource":"BID","url":"http://www.securityfocus.com/bid/25037"},{"name":"26515","refsource":"SECUNIA","url":"http://secunia.com/advisories/26515"},{"name":"USN-491-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-491-1"},{"name":"26330","refsource":"SECUNIA","url":"http://secunia.com/advisories/26330"},{"name":"https://issues.rpath.com/browse/RPL-1587","refsource":"CONFIRM","url":"https://issues.rpath.com/browse/RPL-1587"},{"name":"HPSBTU02256","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"},{"name":"1018442","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1018442"},{"name":"20070801-01-P","refsource":"SGI","url":"ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"},{"name":"DSA-1341","refsource":"DEBIAN","url":"http://www.debian.org/security/2007/dsa-1341"},{"name":"26308","refsource":"SECUNIA","url":"http://secunia.com/advisories/26308"},{"name":"SUSE-SA:2007:047","refsource":"SUSE","url":"http://www.novell.com/linux/security/advisories/2007_47_bind.html"},{"name":"ADV-2007-2627","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2627"},{"name":"oval:org.mitre.oval:def:2226","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"},{"name":"27643","refsource":"SECUNIA","url":"http://secunia.com/advisories/27643"},{"name":"26236","refsource":"SECUNIA","url":"http://secunia.com/advisories/26236"},{"name":"ADV-2007-2662","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2662"},{"name":"26195","refsource":"SECUNIA","url":"http://secunia.com/advisories/26195"},{"name":"ftp://aix.software.ibm.com/aix/efixes/security/README","refsource":"CONFIRM","url":"ftp://aix.software.ibm.com/aix/efixes/security/README"},{"name":"ADV-2007-3242","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3242"},{"name":"oval:org.mitre.oval:def:10293","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"},{"name":"OpenPKG-SA-2007.022","refsource":"OPENPKG","url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"},{"name":"TA07-319A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html"},{"name":"26925","refsource":"SECUNIA","url":"http://secunia.com/advisories/26925"},{"name":"26160","refsource":"SECUNIA","url":"http://secunia.com/advisories/26160"},{"name":"20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/474545/100/0/threaded"},{"name":"SSRT071449","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"},{"name":"20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/474808/100/0/threaded"},{"name":"26531","refsource":"SECUNIA","url":"http://secunia.com/advisories/26531"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2007-2926","datePublished":"2007-07-24T17:00:00.000Z","dateReserved":"2007-05-30T00:00:00.000Z","dateUpdated":"2024-08-07T13:57:54.738Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-07-24 17:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*","matchCriteriaId":"1F947835-8E96-4793-B81E-EEC103BF0CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*","matchCriteriaId":"8FA93166-513D-40AA-9855-FC89060BA03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*","matchCriteriaId":"5C8B18D7-4D15-46A7-8013-E6267127A427"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*","matchCriteriaId":"9A944178-032B-4637-842D-BC6B227043A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"2926","Ordinal":"1","Title":"CVE-2007-2926","CVE":"CVE-2007-2926","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"2926","Ordinal":"1","NoteData":"ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.","Type":"Description","Title":"CVE-2007-2926"},{"CveYear":"2007","CveId":"2926","Ordinal":"2","NoteData":"2007-07-24","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"2926","Ordinal":"3","NoteData":"2018-10-16","Type":"Other","Title":"Modified"}]}}}