CVE-2008-1447: isc bind Insufficient Entropy

CVSS: 6.8v3.1MediumModified

AliasesRHSA-2008:0533RHSA-2008:0789DEBIAN-CVE-2008-1447+4 more

Published 08-07-2008Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2008-1447 is a medium (CVSS 6.8) Insufficient Entropy vulnerability in isc bind. EPSS estimates a 95.18% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk

56/100

0100

High · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v3.1 (NVD)

EPSS score

95.18%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits5exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1

DSA-1619-1

Timeline

08-07-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."

CVSS metrics

3 scores · 2 sources · 2 versions

v3.16.8v2.05.0

EPSS trend

Probability

95.18%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 95.18% on 18-09-2026

18-09-202618-10-2026

EPSS score

95.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

exploit-databaseremotemultipleVerified
BIND 9.4.1 < 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
Maturity: weaponized
exploit-databaseremotemultipleVerified
BIND 9.x - Remote DNS Cache Poisoning
Maturity: weaponized
exploit-databaseremotemultipleVerified
BIND 9.x - Remote DNS Cache Poisoning
Maturity: weaponized

Show all 5 exploits

MetasploitremoteUnverified
DNS BailiWicked Domain Attack
auxiliary/spoof/dns/bailiwicked_domain
Maturity: poc
MetasploitremoteUnverified
DNS BailiWicked Host Attack
auxiliary/spoof/dns/bailiwicked_host
Maturity: poc

Weaknesses

CWE · root cause

CWE-331Insufficient EntropyThe product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Affected systems

Redhat17 products

bind< 0:9.2.1-10.el2 | < 20:9.2.4-22.el3 | < 20:9.2.4-28.0.1.el4 | < 30:9.3.4-6.0.2.P1.el5_2
bind-chroot< 20:9.2.4-22.el3 | < 20:9.2.4-28.0.1.el4 | < 30:9.3.4-6.0.2.P1.el5_2
bind-debuginfo< 20:9.2.4-22.el3 | < 20:9.2.4-28.0.1.el4 | < 30:9.3.4-6.0.2.P1.el5_2
bind-devel< 0:9.2.1-10.el2 | < 20:9.2.4-22.el3 | < 20:9.2.4-28.0.1.el4 | < 30:9.3.4-6.0.2.P1.el5_2
bind-libbind-devel< 30:9.3.4-6.0.2.P1.el5_2

Show all 17

Debian7 products

adns< 1.4-2
bind9< 1:9.5.0.dfsg-5 | < 1:9.4.2-10+lenny1 | < 1:9.3.4-2etch3
dnsmasq< 2.43-1 | < 2.35-1+etch4
dnspython< 1.7.1-1
libnet-dns-perl< 0.63-2

Show all 7

Isc1 product

bind4 | 8 | 9.2.9

3 vendors · 25 products

References

208 links

www.securitytracker.com/id?1020438VDB EntryX Refsource SECTRACKThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.kb.cert.org/vuls/id/800113Third Party AdvisoryX Refsource CERT VNUS Government ResourceARTICLE
secunia.com/advisories/31137Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31430Third Party AdvisoryX Refsource SECUNIA
www.kb.cert.org/vuls/id/MIMG-7DWR4JX Refsource CONFIRMThird Party AdvisoryUS Government Resource
secunia.com/advisories/31169Third Party AdvisoryX Refsource SECUNIA
www.phys.uu.nl/~rombouts/pdnsd.htmlX Refsource CONFIRMThird Party Advisory
www.securitytracker.com/id?1020702VDB EntryX Refsource SECTRACKThird Party Advisory

Show all 100 references

security.gentoo.org/glsa/glsa-201209-25.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2008/2052/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.securitytracker.com/id?1020561VDB EntryX Refsource SECTRACKThird Party Advisory
www.vmware.com/security/advisories/VMSA-2008-0014.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=141879471518471&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www.securitytracker.com/id?1020578VDB EntryX Refsource SECTRACKThird Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627VDB EntrySignatureX Refsource OVALTool Signature
www.securitytracker.com/id?1020802VDB EntryX Refsource SECTRACKThird Party Advisory
marc.info?l=bugtraq&m=123324863916385&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www.securityfocus.com/bid/30131VDB EntryX Refsource BIDThird Party Advisory
www.openbsd.org/errata42.htmlVendor AdvisoryX Refsource OPENBSDThird Party Advisory
secunia.com/advisories/31236Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.securitytracker.com/id?1020651VDB EntryX Refsource SECTRACKThird Party Advisory
www.securitytracker.com/id?1020437VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/31209Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31012Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31151Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2050/referencesVDB EntryX Refsource VUPENThird Party Advisory
support.citrix.com/article/CTX117991X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/31237Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.phys.uu.nl/~rombouts/pdnsd/ChangeLogX Refsource CONFIRMThird Party Advisory
lists.apple.com/archives/security-announce//2008/Jul/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43334VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/31495Third Party AdvisoryX Refsource SECUNIA
www.exploit-db.com/exploits/6130ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtmlVendor AdvisoryX Refsource CISCOThird Party Advisory
www.securitytracker.com/id?1020579VDB EntryX Refsource SECTRACKThird Party Advisory
www.nominum.com/asset_upload_file741_2661.pdfX Refsource MISCThird Party Advisory
www.securitytracker.com/id?1020653VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/30998Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1603Vendor AdvisoryX Refsource DEBIANPatch
www.vupen.com/english/advisories/2008/2525VDB EntryX Refsource VUPENThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/31094Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ibm.com/support/docview.wss?uid=isg1IZ26668Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
secunia.com/advisories/31687Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2025/referencesVDB EntryX Refsource VUPENThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1Vendor AdvisoryX Refsource SUNALERTThird Party Advisory
www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/31588Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31019Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2029/referencesVDB EntryX Refsource VUPENThird Party Advisory
marc.info?l=bugtraq&m=121630706004256&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www.exploit-db.com/exploits/6123ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.ibm.com/support/docview.wss?uid=isg1IZ26671Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.vupen.com/english/advisories/2008/2268VDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2009/0297VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/31207Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31031Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2584VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/31451Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2051/referencesVDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/30977Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0789.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2008/2377VDB EntryX Refsource VUPENThird Party Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368Vendor AdvisoryX Refsource HPBroken Link
www.securitytracker.com/id?1020558VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/31221Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-0533.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.openbsd.org/errata43.htmlVendor AdvisoryX Refsource OPENBSDThird Party Advisory
www.securitytracker.com/id?1020804VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/31143Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/495289/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/2195/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2008/2196/referencesVDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/33714Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=121866517322103&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
secunia.com/advisories/33786Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1020448VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/31882Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2384VDB EntryX Refsource VUPENThird Party Advisory
www.ibm.com/support/docview.wss?uid=isg1IZ26669Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
up2date.astaro.com/2008/08/up2date_7202_released.htmlX Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2008/2123/referencesVDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT3026X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/31014Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30979Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1020575VDB EntryX Refsource SECTRACKThird Party Advisory
www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2008/2482VDB EntryX Refsource VUPENThird Party Advisory
www.ibm.com/support/docview.wss?uid=isg1IZ26672Vendor AdvisoryX Refsource AIXAPARThird Party Advisory
support.apple.com/kb/HT3129X Refsource CONFIRMThird Party Advisory
www.debian.org/security/2008/dsa-1619Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.vupen.com/english/advisories/2008/2166/referencesVDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/31072Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2139/referencesVDB EntryX Refsource VUPENThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761VDB EntrySignatureX Refsource OVALTool Signature

Showing 100 of 208. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities