CVE-2008-1447
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other
02 Description
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 95.18% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 99.8% of scored records. A rank, not a probability.
- NVD base score
- 6.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- Important. Red Hat's rating for its own products, not a CVSS rating.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2008-07-08 23:00Z18 YR AGO
- Last updated
- 2024-08-07 08:24Z2 YR AGO
- Reserved
- 2008-03-21
- Assigning CNA
- microsoft
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-331Insufficient EntropyBase
- Data version
- 5.1
- Document digest
- 58fcdde9a9b419e7290401d6fc05b69f5e18f71b36c586210d3ab7dc1c38cdfa
05 Affected products
06 References
- www.securitytracker.com1020438http://www.securitytracker.com/id?1020438
- www.redhat.comFEDORA-2008-6256https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html
- lists.opensuse.orgSUSE-SR:2008:017http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
- www.kb.cert.orgVU#800113http://www.kb.cert.org/vuls/id/800113
- secunia.com31137http://secunia.com/advisories/31137
- secunia.com31430http://secunia.com/advisories/31430
- www.kb.cert.orghttp://www.kb.cert.org/vuls/id/MIMG-7DWR4J
- secunia.com31169http://secunia.com/advisories/31169
- www.phys.uu.nlhttp://www.phys.uu.nl/~rombouts/pdnsd.html
- www.securitytracker.com1020702http://www.securitytracker.com/id?1020702
- security.gentoo.orgGLSA-201209-25http://security.gentoo.org/glsa/glsa-201209-25.xml
- www.vupen.comADV-2008-2052http://www.vupen.com/english/advisories/2008/2052/references
- www.securitytracker.com1020561http://www.securitytracker.com/id?1020561
- www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2008-0014.html
- marc.infoHPSBOV03226http://marc.info/?l=bugtraq&m=141879471518471&w=2
- www.securitytracker.com1020578http://www.securitytracker.com/id?1020578
- security.freebsd.orgFreeBSD-SA-08:06http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc
- oval.cisecurity.orgoval:org.mitre.oval:def:9627https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627
- www.securitytracker.com1020802http://www.securitytracker.com/id?1020802
- marc.infoHPSBMP02404http://marc.info/?l=bugtraq&m=123324863916385&w=2
- www.securityfocus.com30131http://www.securityfocus.com/bid/30131
- www.openbsd.org[4.2] 013: SECURITY FIX: July 23, 2008http://www.openbsd.org/errata42.html#013_bind
- secunia.com31236http://secunia.com/advisories/31236
- lists.apple.comAPPLE-SA-2008-09-15http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
- www.securitytracker.com1020651http://www.securitytracker.com/id?1020651
- www.securitytracker.com1020437http://www.securitytracker.com/id?1020437
- secunia.com31209http://secunia.com/advisories/31209
- secunia.com31012http://secunia.com/advisories/31012
- secunia.com31151http://secunia.com/advisories/31151
- www.vupen.comADV-2008-2050http://www.vupen.com/english/advisories/2008/2050/references
- support.citrix.comhttp://support.citrix.com/article/CTX117991
- secunia.com31237http://secunia.com/advisories/31237
- www.phys.uu.nlhttp://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog
- lists.apple.comAPPLE-SA-2008-07-31http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
- exchange.xforce.ibmcloud.comwin-dns-client-server-spoofing(43334)https://exchange.xforce.ibmcloud.com/vulnerabilities/43334
- secunia.com31495http://secunia.com/advisories/31495
- www.exploit-db.com6130https://www.exploit-db.com/exploits/6130
- www.cisco.com20080708 Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attackshttp://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml
- www.securitytracker.com1020579http://www.securitytracker.com/id?1020579
- www.nominum.comhttp://www.nominum.com/asset_upload_file741_2661.pdf
- www.securitytracker.com1020653http://www.securitytracker.com/id?1020653
- secunia.com30998http://secunia.com/advisories/30998
- www.debian.orgDSA-1603http://www.debian.org/security/2008/dsa-1603
- www.vupen.comADV-2008-2525http://www.vupen.com/english/advisories/2008/2525
- lists.opensuse.orgSUSE-SA:2008:033http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html
- secunia.com31094http://secunia.com/advisories/31094
- www.ibm.comIZ26668http://www.ibm.com/support/docview.wss?uid=isg1IZ26668
- secunia.com31687http://secunia.com/advisories/31687
- www.vupen.comADV-2008-2025http://www.vupen.com/english/advisories/2008/2025/references
- sunsolve.sun.com239392http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1
- www.us-cert.govTA08-260Ahttp://www.us-cert.gov/cas/techalerts/TA08-260A.html
- secunia.com31588http://secunia.com/advisories/31588
- secunia.com31019http://secunia.com/advisories/31019
- www.vupen.comADV-2008-2029http://www.vupen.com/english/advisories/2008/2029/references
- marc.infoSSRT080058http://marc.info/?l=bugtraq&m=121630706004256&w=2
- www.exploit-db.com6123https://www.exploit-db.com/exploits/6123
- www.ibm.comIZ26671http://www.ibm.com/support/docview.wss?uid=isg1IZ26671
- www.redhat.comFEDORA-2008-6281https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html
- www.vupen.comADV-2008-2268http://www.vupen.com/english/advisories/2008/2268
- www.vupen.comADV-2009-0297http://www.vupen.com/english/advisories/2009/0297
- secunia.com31207http://secunia.com/advisories/31207
- secunia.com31031http://secunia.com/advisories/31031
- www.vupen.comADV-2008-2584http://www.vupen.com/english/advisories/2008/2584
- secunia.com31451http://secunia.com/advisories/31451
- www.vupen.comADV-2008-2051http://www.vupen.com/english/advisories/2008/2051/references
- secunia.com30977http://secunia.com/advisories/30977
- www.redhat.comRHSA-2008:0789http://www.redhat.com/support/errata/RHSA-2008-0789.html
- www.vupen.comADV-2008-2377http://www.vupen.com/english/advisories/2008/2377
- h20000.www2.hp.comHPSBNS02405http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368
- www.securitytracker.com1020558http://www.securitytracker.com/id?1020558
- secunia.com31221http://secunia.com/advisories/31221
- rhn.redhat.comRHSA-2008:0533http://rhn.redhat.com/errata/RHSA-2008-0533.html
- www.openbsd.org[4.3] 004: SECURITY FIX: July 23, 2008http://www.openbsd.org/errata43.html#004_bind
- www.securitytracker.com1020804http://www.securitytracker.com/id?1020804
- secunia.com31143http://secunia.com/advisories/31143
- www.securityfocus.com20080808 New paper: An Illustrated Guide to the Kaminsky DNS Vulnerabilityhttp://www.securityfocus.com/archive/1/495289/100/0/threaded
- www.vupen.comADV-2008-2195http://www.vupen.com/english/advisories/2008/2195/references
- www.vupen.comADV-2008-2196http://www.vupen.com/english/advisories/2008/2196/references
- secunia.com33714http://secunia.com/advisories/33714
- marc.infoHPSBTU02358http://marc.info/?l=bugtraq&m=121866517322103&w=2
- secunia.com33786http://secunia.com/advisories/33786
- www.securitytracker.com1020448http://www.securitytracker.com/id?1020448
- secunia.com31882http://secunia.com/advisories/31882
- www.vupen.comADV-2008-2384http://www.vupen.com/english/advisories/2008/2384
- www.ibm.comIZ26669http://www.ibm.com/support/docview.wss?uid=isg1IZ26669
- up2date.astaro.comhttp://up2date.astaro.com/2008/08/up2date_7202_released.html
- www.vupen.comADV-2008-2123http://www.vupen.com/english/advisories/2008/2123/references
- support.apple.comhttp://support.apple.com/kb/HT3026
- secunia.com31014http://secunia.com/advisories/31014
- secunia.com30979http://secunia.com/advisories/30979
- www.securitytracker.com1020575http://www.securitytracker.com/id?1020575
- www.ruby-lang.orghttp://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
- www.vupen.comADV-2008-2482http://www.vupen.com/english/advisories/2008/2482
- www.ibm.comIZ26672http://www.ibm.com/support/docview.wss?uid=isg1IZ26672
- support.apple.comhttp://support.apple.com/kb/HT3129
- www.debian.orgDSA-1619http://www.debian.org/security/2008/dsa-1619
- www.vupen.comADV-2008-2166http://www.vupen.com/english/advisories/2008/2166/references
- secunia.com31072http://secunia.com/advisories/31072
- www.vupen.comADV-2008-2139http://www.vupen.com/english/advisories/2008/2139/references
- oval.cisecurity.orgoval:org.mitre.oval:def:5761https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761
- www.vupen.comADV-2008-2092http://www.vupen.com/english/advisories/2008/2092/references
- secunia.com31482http://secunia.com/advisories/31482
- www.ibm.comIZ26670http://www.ibm.com/support/docview.wss?uid=isg1IZ26670
- www.mandriva.comMDVSA-2008:139http://www.mandriva.com/security/advisories?name=MDVSA-2008:139
- oval.cisecurity.orgoval:org.mitre.oval:def:5917https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917
- secunia.com30989http://secunia.com/advisories/30989
- www.vupen.comADV-2008-2055http://www.vupen.com/english/advisories/2008/2055/references
- support.nortel.comhttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152
- www.ipcop.orghttp://www.ipcop.org/index.php?name=News&file=article&sid=40
- secunia.com31065http://secunia.com/advisories/31065
- secunia.com31254http://secunia.com/advisories/31254
- www.securityfocus.com20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.http://www.securityfocus.com/archive/1/495869/100/0/threaded
- www.doxpara.comhttp://www.doxpara.com/?p=1176
- ftp.netbsd.orgNetBSD-SA2008-009ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc
- www.ubuntu.comUSN-627-1http://www.ubuntu.com/usn/usn-627-1
- www.vupen.comADV-2010-0622http://www.vupen.com/english/advisories/2010/0622
- www.securitytracker.com1020576http://www.securitytracker.com/id?1020576
- www.isc.orghttp://www.isc.org/index.pl?/sw/bind/bind-security.php
- h20000.www2.hp.comHPSBOV02357http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520
- secunia.com31153http://secunia.com/advisories/31153
- wiki.rpath.comhttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231
- www.vupen.comADV-2008-2549http://www.vupen.com/english/advisories/2008/2549
- www.ibm.comIZ26667http://www.ibm.com/support/docview.wss?uid=isg1IZ26667
- www.rtpro.yamaha.co.jphttp://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html
- secunia.com31213http://secunia.com/advisories/31213
- secunia.com31030http://secunia.com/advisories/31030
- www.ubuntu.comUSN-622-1http://www.ubuntu.com/usn/usn-622-1
- secunia.com31033http://secunia.com/advisories/31033
- www.unixwiz.nethttp://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html
- www.securitytracker.com1020440http://www.securitytracker.com/id?1020440
- lists.apple.comAPPLE-SA-2008-09-12http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html
- www.doxpara.comhttp://www.doxpara.com/DMK_BO2K8.ppt
- lists.grok.org.uk20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
- www.debian.orgDSA-1604http://www.debian.org/security/2008/dsa-1604
- secunia.com31823http://secunia.com/advisories/31823
- secunia.com31326http://secunia.com/advisories/31326
- www.vupen.comADV-2008-2558http://www.vupen.com/english/advisories/2008/2558
- www.exploit-db.com6122https://www.exploit-db.com/exploits/6122
- oval.cisecurity.orgoval:org.mitre.oval:def:5725https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725
- www.caughq.orghttp://www.caughq.org/exploits/CAU-EX-2008-0003.txt
- exchange.xforce.ibmcloud.comcisco-multiple-dns-cache-poisoning(43637)https://exchange.xforce.ibmcloud.com/vulnerabilities/43637
- www.vupen.comADV-2008-2383http://www.vupen.com/english/advisories/2008/2383
- www.securitytracker.com1020560http://www.securitytracker.com/id?1020560
- secunia.com31900http://secunia.com/advisories/31900
- www.kb.cert.orghttp://www.kb.cert.org/vuls/id/MIMG-7ECL8Q
- support.citrix.comhttp://support.citrix.com/article/CTX118183
- secunia.com30925http://secunia.com/advisories/30925
- www.vupen.comADV-2009-0311http://www.vupen.com/english/advisories/2009/0311
- wiki.rpath.comhttp://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
- www.debian.orgDSA-1623http://www.debian.org/security/2008/dsa-1623
- www.vupen.comADV-2008-2582http://www.vupen.com/english/advisories/2008/2582
- www.caughq.orghttp://www.caughq.org/exploits/CAU-EX-2008-0002.txt
- www.debian.orgDSA-1605http://www.debian.org/security/2008/dsa-1605
- www.novell.comhttp://www.novell.com/support/viewContent.do?externalId=7000912
- www.bluecoat.comhttp://www.bluecoat.com/support/security-advisories/dns_cache_poisoning
- www.vupen.comADV-2008-2342http://www.vupen.com/english/advisories/2008/2342
- www.vupen.comADV-2008-2114http://www.vupen.com/english/advisories/2008/2114/references
- secunia.com30973http://secunia.com/advisories/30973
- secunia.com31204http://secunia.com/advisories/31204
- secunia.com31354http://secunia.com/advisories/31354
- security.gentoo.orgGLSA-200812-17http://security.gentoo.org/glsa/glsa-200812-17.xml
- oval.cisecurity.orgoval:org.mitre.oval:def:12117https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117
- secunia.com33178http://secunia.com/advisories/33178
- secunia.com30988http://secunia.com/advisories/30988
- lists.apple.comAPPLE-SA-2008-09-09http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html
- secunia.com31011http://secunia.com/advisories/31011
- blog.invisibledenizen.orghttp://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html
- www.vupen.comADV-2008-2334http://www.vupen.com/english/advisories/2008/2334
- www.securitytracker.com1020577http://www.securitytracker.com/id?1020577
- secunia.com31422http://secunia.com/advisories/31422
- secunia.com31197http://secunia.com/advisories/31197
- www.securitytracker.com1020548http://www.securitytracker.com/id?1020548
- www.vupen.comADV-2008-2467http://www.vupen.com/english/advisories/2008/2467
- sunsolve.sun.com240048http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1
- www.us-cert.govTA08-190Bhttp://www.us-cert.gov/cas/techalerts/TA08-190B.html
- www.us-cert.govTA08-190Ahttp://www.us-cert.gov/cas/techalerts/TA08-190A.html
- security.gentoo.orgGLSA-200807-08http://security.gentoo.org/glsa/glsa-200807-08.xml
- secunia.com31022http://secunia.com/advisories/31022
- slackware.comSSA:2008-191http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239
- www.securitytracker.com1020449http://www.securitytracker.com/id?1020449
- secunia.com31093http://secunia.com/advisories/31093
- secunia.com31052http://secunia.com/advisories/31052
- secunia.com30980http://secunia.com/advisories/30980
- slackware.comSSA:2008-205-01http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680
- bugs.debian.orghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401
- secunia.com31199http://secunia.com/advisories/31199
- www.vupen.comADV-2008-2030http://www.vupen.com/english/advisories/2008/2030/references
- www.vupen.comADV-2008-2291http://www.vupen.com/english/advisories/2008/2291
- www.vupen.comADV-2008-2023http://www.vupen.com/english/advisories/2008/2023/references
- www.vupen.comADV-2008-2466http://www.vupen.com/english/advisories/2008/2466
- docs.microsoft.comMS08-037https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037
- secunia.com31212http://secunia.com/advisories/31212
- www.vupen.comADV-2008-2113http://www.vupen.com/english/advisories/2008/2113/references
- secunia.com31152http://secunia.com/advisories/31152
- www.vupen.comADV-2008-2019http://www.vupen.com/english/advisories/2008/2019/references
- www.vupen.comADV-2008-2197http://www.vupen.com/english/advisories/2008/2197/references
07 Fixed in
Debian 12
- adns Fixed in 1.4-2
- bind9 Fixed in 1:9.5.0.dfsg-5
- dnsmasq Fixed in 2.43-1
- dnspython Fixed in 1.7.1-1
- libnet-dns-perl Fixed in 0.63-2
- refpolicy Fixed in 2:0.0.20080702-1
- udns Fixed in 0.2-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- adns Fixed in 1.4-2
- bind9 Fixed in 1:9.5.0.dfsg-5
- dnsmasq Fixed in 2.43-1
- dnspython Fixed in 1.7.1-1
- libnet-dns-perl Fixed in 0.63-2
- refpolicy Fixed in 2:0.0.20080702-1
- udns Fixed in 0.2-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 14
- adns Fixed in 1.4-2
- bind9 Fixed in 1:9.5.0.dfsg-5
- dnsmasq Fixed in 2.43-1
- dnspython Fixed in 1.7.1-1
- libnet-dns-perl Fixed in 0.63-2
- refpolicy Fixed in 2:0.0.20080702-1
- udns Fixed in 0.2-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.