Details of VAR-200707-0675

ID

VAR-200707-0675

CVE

CVE-2008-1447

TITLE

Multiple DNS implementations vulnerable to cache poisoning

Trust: 0.8

sources: CERT/CC: VU#800113

DESCRIPTION

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug.". Deficiencies in the DNS protocol and common DNS implementations facilitate DNS cache poisoning attacks. ISC (Internet Systems Consortiuim) BIND generates cryptographically weak DNS query IDs which could allow a remote attacker to poison DNS caches. In IP NAT filtering in Sun Solaris 10 and OpenSolaris series products, when a DNS server runs NAT, it incorrectly changes the original address of the data packet. When the destination address is a DNS port, it will allow remote attackers to bypass CVE-2008 -1447 security protection. RESOLUTION The resolution is to discontinue the use of BIND/iX and migrate DNS services to another platform. ---------------------------------------------------------------------- BETA test the new Secunia Personal Software Inspector! The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors. Download the free PSI BETA from the Secunia website: https://psi.secunia.com/ ---------------------------------------------------------------------- TITLE: BIND 8 Predictable DNS Query IDs Vulnerability SECUNIA ADVISORY ID: SA26629 VERIFY ADVISORY: http://secunia.com/advisories/26629/ CRITICAL: Moderately critical IMPACT: Spoofing WHERE: >From remote SOFTWARE: ISC BIND 8.x.x http://secunia.com/product/76/ DESCRIPTION: Amit Klein has reported a vulnerability in BIND, which can be exploited by malicious people to poison the DNS cache. The vulnerability is caused due to predictable query IDs in outgoing queries (e.g. Reportedly, the probability to guess the next query ID is between 25% and 43%, depending on the handled DNS traffic. NOTE: BIND 8.x has reached "End of Life". PROVIDED AND/OR DISCOVERED BY: Amit Klein ORIGINAL ADVISORY: ISC: http://www.isc.org/index.pl?/sw/bind/bind8-eol.php Trusteer: http://www.trusteer.com/docs/bind8dns.html OTHER REFERENCES: US-CERT VU#927905: http://www.kb.cert.org/vuls/id/927905 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. Workaround ========== There is no known workaround at this time. Resolution ========== All BIND users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-dns/bind-9.4.2_p1" Note: In order to utilize the query port randomization to mitigate the weakness, you need to make sure that your network setup allows the DNS server to use random source ports for query and that you have not set a fixed query port via the "query-source port" directive in the BIND configuration. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200901-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: pdnsd: Denial of Service and cache poisoning Date: January 11, 2009 Bugs: #231285 ID: 200901-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Two errors in pdnsd allow for Denial of Service and cache poisoning. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dns/pdnsd < 1.2.7 >= 1.2.7 Description =========== Two issues have been reported in pdnsd: * The p_exec_query() function in src/dns_query.c does not properly handle many entries in the answer section of a DNS reply, related to a "dangling pointer bug" (CVE-2008-4194). Impact ====== An attacker could exploit the second weakness to poison the cache of pdnsd and thus spoof DNS traffic, which could e.g. The first issue can be exploited by enticing pdnsd to send a query to a malicious DNS server, or using the port randomization weakness, and might lead to a Denial of Service. Workaround ========== Port randomization can be enabled by setting the "query_port_start" option to 1024 which would resolve the CVE-2008-1447 issue. Resolution ========== All pdnsd users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-dns/pdnsd-1.2.7" References ========== [ 1 ] CVE-2008-1447 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447 [ 2 ] CVE-2008-4194 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4194 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200901-03.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. License ======= Copyright 2009 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . This change increases the size of the space from which an attacker has to guess values in a backwards-compatible fashion and makes successful attacks significantly more difficult. Note that this security update changes BIND network behavior in a fundamental way, and the following steps are recommended to ensure a smooth upgrade. Make sure that your network configuration is compatible with source port randomization. If you guard your resolver with a stateless packet filter, you may need to make sure that no non-DNS services listen on on the 1024--65535 UDP port range and open it at the packet filter. For instance, packet filters based on etch's Linux 2.6.18 kernel only support stateless filtering of IPv6 packets, and are therefore pose this additional difficulty. (If you use IPv4 with iptables and ESTABLISHED rules, networking changes are likely not required.) 2. Verify that the named process has been restarted and answers recursive queries. (If all queries result in timeouts, this indicates that networking changes are necessary; see the first step.) 3. Verify that source port randomization is active. Check that the /var/log/daemon.log file does not contain messages of the following form named[6106]: /etc/bind/named.conf.options:28: using specific query-source port suppresses port randomization and can be insecure. right after the "listening on IPv6 interface" and "listening on IPv4 interface" messages logged by BIND upon startup. For additional certainty, use tcpdump or some other network monitoring tool to check for varying UDP source ports. If you cannot activate source port randomization, consider configuring BIND 9 to forward queries to a resolver which can, possibly over a VPN such as OpenVPN to create the necessary trusted network link. (Use BIND's forward-only mode in this case.) Other caching resolvers distributed by Debian (PowerDNS, MaraDNS, Unbound) already employ source port randomization, and no updated packages are needed. BIND 9.5 up to and including version 1:9.5.0.dfsg-4 only implements a weak form of source port randomization and needs to be updated as well. For information on BIND 8, see DSA-1604-1, and for the status of the libc stub resolver, see DSA-1605-1. The updated bind9 packages contain changes originally scheduled for the next stable point release, including the changed IP address of L.ROOT-SERVERS.NET (Debian bug #449148). For the stable distribution (etch), this problem has been fixed in version 9.3.4-2etch3. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your bind9 package. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - ------------------------------- Debian (stable) - --------------- Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3.dsc Size/MD5 checksum: 897 aeb15f8babb1e6e38367b9f19fea87da http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4.orig.tar.gz Size/MD5 checksum: 4043577 198181d47c58a0a9c0265862cd5557b0 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3.diff.gz Size/MD5 checksum: 302126 521abea46b1104f2251cc398f30af303 Architecture independent packages: http://security.debian.org/pool/updates/main/b/bind9/bind9-doc_9.3.4-2etch3_all.deb Size/MD5 checksum: 189560 46ff778db82d2e171d292ecac93ea9b6 alpha architecture (DEC Alpha) http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 98154 bbdbcd3d0840f5ffcf4eaddf5a8c253f http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 1407380 ca8995875e76a25de6f32a47f62ea876 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 226088 93100774ae6da891caf9fa27a2134cdf http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 112616 bca5dcca8abff15f4f9cc911f9f94818 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 322286 677fdcf8e9a8c272a08ed47a79e09209 http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 190084 87d64554a1cdde9f58cc850f7d5961a1 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 96508 48ba9fc0e884f093e95988bd4e088b9c http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 564862 7b23948d7c741d4f287698d28385ce71 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 188742 5dd8024a9864137f4529785fcc9c9231 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 116534 2e7dc9ea95bae40dc396ff504abb03bb http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_alpha.deb Size/MD5 checksum: 115784 b961fd6c797a2d1422ae588bfc25ed9d amd64 architecture (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 224294 4d33744bb92300b061cad41dd8de7ea5 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 1111932 e43ced7eae496d7835247a068bef4a66 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 190742 9e39ced5d3464594b9dda6ce683fc653 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 319008 e36a35983ebc5061e8669ef7f004a851 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 552414 c93c2863bddd5661010ae3472e210aa8 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 95922 f114eb76add0d7dabad1d082d38ccf08 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 117072 a70d1d96ea01aa24fb9642e09133824f http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 187646 70372cec3522356dcd00901ea64714d4 http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 111270 6dc6edfcca9fecb28c7e66d31ab14a74 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 114722 905d0f9b7b5ebc0308c54158e71d03cc http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_amd64.deb Size/MD5 checksum: 96704 09d3c850f12a6c1f6eab4e800a118c87 arm architecture (ARM) http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_arm.deb Size/MD5 checksum: 107888 b2ea4933e233a1af8dd1e5ee641999a2 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_arm.deb Size/MD5 checksum: 112714 27b1fde9b144cacb1ae06a441d7c5787 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_arm.deb Size/MD5 checksum: 116076 cafc3294083de02518ab5fe0f0488c3b http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_arm.deb Size/MD5 checksum: 532206 a005bdff779fed950e4750231d0184b2 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_arm.deb Size/MD5 checksum: 187364 72fdca60a20876be71b678028cefc316 http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_arm.deb Size/MD5 checksum: 95752 bce98b259a2821d59f6e6b441b491d77 http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_arm.deb Size/MD5 checksum: 182950 26a15d51a4e6f1ea1dda99ab4d3ea34c http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_arm.deb Size/MD5 checksum: 217686 97f538e27ab7c765b514a9ce59869a41 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_arm.deb Size/MD5 checksum: 95168 374d7f18915fc8eb6b775d272cf28f2e http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_arm.deb Size/MD5 checksum: 1074498 fdada51888027e9c3e89961b31a48ded http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_arm.deb Size/MD5 checksum: 311078 43d1c044b0cc81b072b8962ad3b8f019 hppa architecture (HP PA RISC) http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 96986 bba6d0a611b7088e284564b430f91405 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 97140 14f3dacd102208700660873637dea18b http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 185570 012eb78b091c0991988a95160df7d65d http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 115822 d717418b7ec770e5419e0941670eab19 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 543342 201331119c074430d503b68dc210e187 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 1258146 2f092d0708338d0a3ac8924218fee0d7 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 315070 bc8d94bec7b1c8cf80f64fb72d1f38e5 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 187942 1cd85afac13850d1807a5b50b9d3262f http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 114612 912dc2007ca7cb6097a3e6a4e98897e3 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 217378 49276452262a155ba17db2ad8c66e3e2 http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_hppa.deb Size/MD5 checksum: 113466 428d268ce8ad5386c1af758ca4cff2ce i386 architecture (Intel ia32) http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_i386.deb Size/MD5 checksum: 106034 ce4d4a024472317185d4c6492b7d30df http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_i386.deb Size/MD5 checksum: 180292 1fd02a86a31b68a8db2407904495a0db http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_i386.deb Size/MD5 checksum: 94838 9dbc2734dd8b8bb7c3e7684faabea64e http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_i386.deb Size/MD5 checksum: 206330 a22fb6cb47d6e449007d665b9e6d8c52 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_i386.deb Size/MD5 checksum: 113162 b9bc5fa7f96313235a53ab6fd819b58b http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_i386.deb Size/MD5 checksum: 472708 9edfb07c186a93aea1a2e602e0ee6335 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_i386.deb Size/MD5 checksum: 94822 d2fc00416dc090a535b280f48eee7f46 http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_i386.deb Size/MD5 checksum: 169930 47c43c9738afb7ed72618930dc702ed3 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_i386.deb Size/MD5 checksum: 296722 dd1979969210386fc36d119e19e12cc2 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_i386.deb Size/MD5 checksum: 996528 56db22ee21e053443e72ccd11a25181b http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_i386.deb Size/MD5 checksum: 110134 5491e4e33e43f1300840b62947690b7a ia64 architecture (Intel ia64) http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 232052 eb9215cb2ba71ded815b4ca6f0ac0744 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 99978 ceee4c1dc16fdf2d7fefe1aee6d8dd85 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 393324 553b67ca638482db8e1586d231f03abe http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 740264 a30c98b25296a147d47d7f44c8418883 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 127606 33d62368c2ce437e660708eb6b0ffe2b http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 216344 0a0b33f34dbeb744bd8af8ad8388048f http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 125806 3aafce71b9e4ecaf01602c409a355b54 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 1584302 d982b4443c38056cdeb80b327ee36f3a http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 117782 ae8ae735a8054ff473d305b06c90c68a http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 102432 4443f6e43cc1e4c7448965a0501bfe54 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_ia64.deb Size/MD5 checksum: 280866 c20244c3a06177b934ac804b382b85c7 mips architecture (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_mips.deb Size/MD5 checksum: 174012 cf61e15aa7c79b40ae94a3c1d08ba496 http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_mips.deb Size/MD5 checksum: 301476 4094fd919da162322ea07d62378cc664 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_mips.deb Size/MD5 checksum: 110326 be73e626902012ca986d4192804017e7 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_mips.deb Size/MD5 checksum: 180490 dde7f37a0a2456190461f5f26bf30ab6 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_mips.deb Size/MD5 checksum: 1229398 37af92bf5074d9a260fd4ff5346dc4b8 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_mips.deb Size/MD5 checksum: 211386 8083484e19ebc9099022954350c6baf7 http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_mips.deb Size/MD5 checksum: 94992 46f858e2ed33a864539476d25bd9b44f http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_mips.deb Size/MD5 checksum: 94230 6bfa6b8d78c46567a341f6174f9aa874 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_mips.deb Size/MD5 checksum: 491862 fc2d747a29c0116da5936b4964ef8146 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_mips.deb Size/MD5 checksum: 113268 58fb17d2ee0415e13fdad4727534b6cc http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_mips.deb Size/MD5 checksum: 107912 5834642a56bb9548510f8cd0a3ae766f mipsel architecture (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 299514 0b5de102f7ddf83d497498b320613556 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 488260 7b85b99ea5c24f74e531bbd9056672e9 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 1205384 a3211957988d4aaae40776ff41cf6a01 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 113016 dddd0a37c778cd68696318a7adc1abcd http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 110254 6754bc57fcac807b5569531f7e821802 http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 174148 23e91bbb42a44ca80535079660813277 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 179630 fa26c51aa248cb502ac54544bdd6ced0 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 210904 21784fc7019a384e78ecc94a10f4e315 http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 94936 2068abe2f2e78675ad94ea28579efc87 http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 107166 2cfce41a4fc41aa9986cdef01e09705d http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_mipsel.deb Size/MD5 checksum: 94098 c95a157cfa3feef62450afdef3fe65a8 powerpc architecture (PowerPC) http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 173606 9618a781d59f94f751e18db86cf6b948 http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 112276 e786724068250eb53c475a3e51035d51 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 113842 4961da1e75c17f3f00621acfc06d10fe http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 488428 b777fc3fe13b319817f955f116b40e83 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 1167832 75f402f7bf328da5deee364f4266558d http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 96204 57ec688c7f24161e347054dc93fbd757 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 96170 77d5b9189a05f2b3dca7901bff6e56df http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 301276 dddf71278c1f4afbbc49019248f4328e http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 109288 8fd2b3005fcf95e3616ec8a77b3ad322 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 183310 b9eb85b58aaf29a3106d16410c0d379a http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_powerpc.deb Size/MD5 checksum: 206830 b286690dde8d1412c2de3fa99f7d3c5b s390 architecture (IBM S/390) http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_s390.deb Size/MD5 checksum: 114234 23a30b0e26db0210a1be48c4d44b6d7f http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_s390.deb Size/MD5 checksum: 331864 7c3fab929f1e29873ecfc7c7c4b52ddc http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_s390.deb Size/MD5 checksum: 116656 8abeeeb22e800f63e4b30e0c2dd974e0 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_s390.deb Size/MD5 checksum: 1137342 820a17acdc24ef1dd0c1db7b8e6fc470 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_s390.deb Size/MD5 checksum: 233948 635487d4e6ea4d15704bb14b8cf9236c http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_s390.deb Size/MD5 checksum: 196598 2198086ee8c358aa3ed5046708a31f45 http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_s390.deb Size/MD5 checksum: 194704 c897d956b11161ae8e31e4bffb489883 http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_s390.deb Size/MD5 checksum: 118140 e5e11d59852a32dcd1b78b4aabd22fff http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_s390.deb Size/MD5 checksum: 95664 050d558c3d06e520fb4e6c6cebd520c3 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_s390.deb Size/MD5 checksum: 579484 6fc80f5cde0c2d01b49ae53f027eeecc http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_s390.deb Size/MD5 checksum: 97786 5dda64259aa80e1c2e085e7fc2430299 sparc architecture (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 300090 21095a9477d8db8bdbca300235ddc296 http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 210606 8bd074b427b5f732c5584ca265bb2c28 http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 1121664 2750abf3a8e3ffa54d1b15f6a5b6738e http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 94822 4e2634cf2561a237174a6863377b24cd http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 175248 4231a2791083fc82977535613d38ef2a http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 184036 aea98952994fb97c74df02ae4ed2f28d http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 107574 b6a3a3204c134d54dce2d8d79f77f647 http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 493628 b5c5a9638091fd0d6543a405bfdefd53 http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 94828 4657a6a42f7f2fac5ef96d273e9de4df http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 114258 32f88744a6e6e648377dda42ff910cbb http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_sparc.deb Size/MD5 checksum: 111158 a59dbf1edb5518b09b2993049922c01a These files will probably be moved into the stable distribution on its next update. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: bind Announcement ID: SUSE-SA:2008:033 Date: Fri, 11 Jul 2008 09:00:00 +0000 Affected Products: openSUSE 10.2 openSUSE 10.3 openSUSE 11.0 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 SLE SDK 10 SP2 SUSE Linux Enterprise Server 10 SP1 SUSE Linux Enterprise Desktop 10 SP2 SUSE Linux Enterprise Server 10 SP2 Vulnerability Type: DNS cache poisoning Severity (1-10): 9 SUSE Default Package: no Cross-References: CVE-2008-1447 Content of This Advisory: 1) Security Vulnerability Resolved: DNS cache poisoning 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The bind daemon is responsible for resolving hostnames in IP addresses and vice versa. The new version of bind uses a random transaction-ID (TRXID) and a random UDP source-port for DNS queries to address DNS cache poisoning attacks possible because of the "birthday paradox" and an attack discovered by Dan Kaminsky. Unfortunately we do not have details about Kaminsky's attack and have to trust the statement that a random UDP source-port is sufficient to stop it. Update packages of bind9 for SLES8 will be available soon. The glibc stub resolver is known to be vulnerable too and we will publish updates as soon as possible. Note, a local attacker can always sniff DNS queries and generate spoofed responses easily. One that is authoritative only and accessible from the Internet to resolve queries for your local systems that are available over the Internet. The other system (caching) is not accessible over the Internet and can be used by internal clients to recursively lookup names and addresses. But we encourage you to install the bind update as soon as possible too. If you use the latest update of pdns-recursor you are not vulnerable to this attack. For the glibc stub resolver bug you can install a local secure DNS for- warder on your machine or make a DNS forwarder available for a protected network. 3) Special Instructions and Notes Please restart the bind daemon after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 11.0: http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-9.4.2-39.2.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-chrootenv-9.4.2-39.2.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-devel-9.4.2-39.2.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-doc-9.4.2-39.2.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-libs-9.4.2-39.2.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-utils-9.4.2-39.2.i586.rpm openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-9.4.1.P1-12.5.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-chrootenv-9.4.1.P1-12.5.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-devel-9.4.1.P1-12.5.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-doc-9.4.1.P1-12.5.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-libs-9.4.1.P1-12.5.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-utils-9.4.1.P1-12.5.i586.rpm openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-9.3.5P1-0.1.i586.rpm ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-chrootenv-9.3.5P1-0.1.i586.rpm ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-devel-9.3.5P1-0.1.i586.rpm ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-doc-9.3.5P1-0.1.i586.rpm ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-libs-9.3.5P1-0.1.i586.rpm ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/bind-utils-9.3.5P1-0.1.i586.rpm x86-64 Platform: openSUSE 11.0: http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/bind-libs-32bit-9.4.2-39.2.x86_64.rpm openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/bind-libs-32bit-9.4.1.P1-12.5.x86_64.rpm openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/bind-libs-32bit-9.3.5P1-0.1.x86_64.rpm Sources: openSUSE 11.0: http://download.opensuse.org/pub/opensuse/update/11.0/rpm/src/bind-9.4.2-39.2.src.rpm openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/bind-9.4.1.P1-12.5.src.rpm openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/bind-9.3.5P1-0.1.src.rpm Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: Open Enterprise Server http://support.novell.com/techcenter/psdb/aa846ea840c9bf29e6974f3b6913e550.html Novell Linux POS 9 http://support.novell.com/techcenter/psdb/aa846ea840c9bf29e6974f3b6913e550.html Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/aa846ea840c9bf29e6974f3b6913e550.html SUSE SLES 9 http://support.novell.com/techcenter/psdb/aa846ea840c9bf29e6974f3b6913e550.html SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SUSE Linux Enterprise Server 10 SP2 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SLE SDK 10 SP2 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SUSE Linux Enterprise 10 SP2 DEBUGINFO http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html SUSE Linux Enterprise Desktop 10 SP2 http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security@suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build@suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security@opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe@opensuse.org>. opensuse-security-announce@opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe@opensuse.org>. ===================================================================== SUSE's security contact is <security@suse.com> or <security@suse.de>. The <security@suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . The fix, while correct, was incompatible with the version of SELinux Reference Policy shipped with Debian Etch, which did not permit a process running in the named_t domain to bind sockets to UDP ports other than the standard 'domain' port (53). The incompatibility affects both the 'targeted' and 'strict' policy packages supplied by this version of refpolicy. When installed, the updated packages will attempt to update the bind policy module on systems where it had been previously loaded and where the previous version of refpolicy was 0.0.20061018-5 or below. Because the Debian refpolicy packages are not yet designed with policy module upgradeability in mind, and because SELinux-enabled Debian systems often have some degree of site-specific policy customization, it is difficult to assure that the new bind policy can be successfully upgraded. The new policy module can be found at /usr/share/selinux/refpolicy-targeted/bind.pp after installation. Administrators wishing to use the bind service policy can reconcile any policy incompatibilities and install the upgrade manually thereafter. HP TCP/IP Services for OpenVMS 5.7 ECO5 package is available from the following location: The HP TCP/IP Services for OpenVMS 5.7 ECO5 kits for both Integrity and Alpha platforms have been uploaded to HP Support Center website. Customers can access the kits from Patch Management page. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. Issue date: 2008-08-29 Updated on: 2008-08-29 (initial release of advisory) CVE numbers: CVE-2008-2101 CVE-2007-5269 CVE-2008-1447 CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2007-5438 CVE-2008-3696 CVE-2008-3697 CVE-2008-3698 CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 CVE-2007-5503 - -------------------------------------------------------------------------- 1. Summary Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. 2. Relevant releases VMware Workstation 6.0.4 and earlier, VMware Workstation 5.5.7 and earlier, VMware Player 2.0.4 and earlier, VMware Player 1.0.7 and earlier, VMware ACE 2.0.4 and earlier, VMware ACE 1.0.6 and earlier, VMware Server 1.0.6 and earlier, VMware ESX 3.0.3 without patches ESX303-200808404-SG, ESX303-200808403-SG ESX303-200808406-SG. VMware ESX 3.0.2 without patches ESX-1005109, ESX-1005113, ESX-1005114. VMware ESX 3.0.1 without patches ESX-1005108, ESX-1005112, ESX-1005111, ESX-1004823, ESX-1005117. NOTE: Hosted products VMware Workstation 5.x, VMware Player 1.x, and VMware ACE 1.x will reach end of general support 2008-11-09. Customers should plan to upgrade to the latest version of their respective products. Extended support (Security and Bug fixes) for ESX 3.0.2 ends on 10/29/2008 and Extended support for ESX 3.0.2 Update 1 ends on 8/8/2009. Users should plan to upgrade to ESX 3.0.3 and preferably to the newest release available. Extended Support (Security and Bug fixes) for ESX 3.0.1 has ended on 2008-07-31. The 3.0.1 patches are released in August because there was no patch release in July. 3. Problem Description I Security Issues a. Setting ActiveX killbit Starting from this release, VMware has set the killbit on its ActiveX controls. Setting the killbit ensures that ActiveX controls cannot run in Internet Explorer (IE), and avoids security issues involving ActiveX controls in IE. See the Microsoft KB article 240797 and the related references on this topic. Security vulnerabilities have been reported for ActiveX controls provided by VMware when run in IE. Under specific circumstances, exploitation of these ActiveX controls might result in denial-of- service or can allow running of arbitrary code when the user browses a malicious Web site or opens a malicious file in IE browser. An attempt to run unsafe ActiveX controls in IE might result in pop-up windows warning the user. Note: IE can be configured to run unsafe ActiveX controls without prompting. VMware recommends that you retain the default settings in IE, which prompts when unsafe actions are requested. Earlier, VMware had issued knowledge base articles, KB 5965318 and KB 9078920 on security issues with ActiveX controls. To avoid malicious scripts that exploit ActiveX controls, do not enable unsafe ActiveX objects in your browser settings. As a best practice, do not browse untrusted Web sites as an administrator and do not click OK or Yes if prompted by IE to allow certain actions. VMware would like to thank Julien Bachmann, Shennan Wang, Shinnai, and Michal Bucko for reporting these issues to us. The Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the names CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, CVE-2007-5438, and CVE-2008-3696 to the security issues with VMware ActiveX controls. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= ================= VirtualCenter any Windows not affected Workstation 6.x Windows 6.0.5 build 109488 or later Workstation 6.x Linux not affected Workstation 5.x Windows 5.5.8 build 108000 or later Workstation 5.x Linux not affected Player 2.x Windows 2.0.5 build 109488 or later Player 2.x Linux not affected Player 1.x Windows 1.0.8 build or later Player 1.x Linux not affected ACE 2.x Windows 2.0.5 build 109488 or later ACE 1.x Windows 1.0.7 build 108880 or later Server 1.x Windows 1.0.7 build 108231 or later Server 1.x Linux not affected Fusion 1.x Mac OS/X not affected ESXi 3.5 ESXi not affected ESX any ESX not affected b. VMware ISAPI Extension Denial of Service The Internet Server Application Programming Interface (ISAPI) is an API that extends the functionality of Internet Information Server (IIS). VMware uses ISAPI extensions in its Server product. One of the ISAPI extensions provided by VMware is vulnerable to a remote denial of service. By sending a malformed request, IIS might shut down. IIS 6.0 restarts automatically. However, IIS 5.0 does not restart automatically when its Startup Type is set to Manual. VMware would like to thank the Juniper Networks J-Security Security Research Team for reporting this issue to us. The Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the name CVE-2008-3697 to this issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= ================= VirtualCenter any Windows not affected Workstation 6.x Windows not affected Workstation 6.x Linux not affected Workstation 5.x Windows not affected Workstation 5.x Linux not affected Player 2.x Windows not affected Player 2.x Linux not affected Player 1.x Windows not affected Player 1.x Linux not affected ACE 2.x Windows not affected ACE 1.x Windows not affected Server 1.x Windows 1.0.7 build 108231 or later Server 1.x Linux not affected Fusion 1.x Mac OS/X not affected ESXi 3.5 ESXi not affected ESX any ESX not affected c. OpenProcess Local Privilege Escalation on Host System This release fixes a privilege escalation vulnerability in host systems. Exploitation of this vulnerability allows users to run arbitrary code on the host system with elevated privileges. VMware would like to thank Sun Bing from McAfee, Inc. for reporting this issue to us. The Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the name CVE-2008-3698 to this issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= ================= VirtualCenter any Windows not affected Workstation 6.x Windows not affected Workstation 6.x Linux not affected Workstation 5.x Windows 5.5.8 build 108000 or later Workstation 5.x Linux not affected Player 2.x Windows not affected Player 2.x Linux not affected Player 1.x Windows 1.0.8 build 109488 or later Player 1.x Linux not affected ACE 2.x Windows not affected ACE 1.x Windows 1.0.7 build 108880 or later Server 1.x Windows 1.0.7 build 108231 or later Server 1.x Linux not affected Fusion 1.x Mac OS/X not affected ESXi 3.5 ESXi not affected ESX any ESX not affected d. Update to Freetype FreeType 2.3.6 resolves an integer overflow vulnerability and other vulnerabilities that can allow malicious users to run arbitrary code or might cause a denial-of-service after reading a maliciously crafted file. This release updates FreeType to 2.3.7. The Common Vulnerabilities and Exposures Project (cve.mitre.com) has assigned the names CVE-2008-1806, CVE-2008-1807, and CVE-2008-1808 to the issues resolved in Freetype 2.3.6. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= ================= VirtualCenter any Windows not affected Workstation 6.x Windows not affected Workstation 6.x Linux 6.0.5 build 109488 or later Workstation 5.x Windows not affected Workstation 5.x Linux 5.5.8 build 108000 or later Player 2.x Windows not affected Player 2.x Linux 2.0.5 build 109488 or later Player 1.x Windows not affected Player 1.x Linux 1.0.8 build 108000 or later ACE 2.x Windows not affected ACE 1.x Windows not affected Server 1.x Windows not affected Server 1.x Linux 1.0.7 build 108231 or later Fusion 1.x Mac OS/X affected, patch pending ESXi 3.5 ESXi not affected ESX 3.5 ESX not affected ESX 3.0.3 ESX not affected ESX 3.0.2 ESX not affected ESX 3.0.1 ESX not affected ESX 2.5.5 ESX affected, patch pending ESX 2.5.4 ESX affected, patch pending e. Update to Cairo Cairo 1.4.12 resolves an integer overflow vulnerability that can allow malicious users to run arbitrary code or might cause a denial-of-service after reading a maliciously crafted PNG file. This release updates Cairo to 1.4.14. The Common Vulnerabilities and Exposures (cve.mitre.com) has assigned the name CVE-2007-5503 to this issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= ================= VirtualCenter any Windows not affected Workstation 6.x Windows not affected Workstation 6.x Linux 6.0.5 build 109488 or later Workstation 5.x Windows not affected Workstation 5.x Linux not affected Player 2.x Windows not affected Player 2.x Linux 2.0.5 build 109488 or later Player 1.x Windows not affected Player 1.x Linux not affected ACE 2.x Windows not affected ACE 1.x Windows not affected Server 1.x Windows not affected Server 1.x Linux not affected Fusion 1.x Mac OS/X affected, patch pending ESXi 3.5 ESXi not affected ESX any ESX not affected f. VMware Consolidated Backup(VCB) command-line utilities may expose sensitive information VMware Consolidated Backup command-line utilities accept the user password through the -p command-line option. Users logged into the service console could gain access to the username and password used by VCB command-line utilities when such commands are running. This patch resolves this issue by providing an alternative way of passing the password used by VCB command-line utilities. The following options are recommended for passing the password: 1. The password is specified in /etc/backuptools.conf (PASSWORD=xxxxx), and -p is not used in the command line. /etc/backuptools.conf file permissions are read/write only for root. 2. No password is specified in /etc/backuptools.conf and the -p option is not used in the command line. The user will be prompted to enter a password. ESX is not affected unless you use VCB. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2008-2101 to this issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= =================== VirtualCenter any Windows not affected hosted * any any not affected ESXi 3.5 ESXi not affected ESX 3.5 ESX ESX350-200806203-UG ESX 3.0.3 ESX ESX303-200808403-SG ESX 3.0.2 ESX ESX-1004824 ESX 3.0.1 ESX ESX-1004823 ESX 2.5.5 ESX not affected ESX 2.5.4 ESX not affected * hosted products are VMware Workstation, Player, ACE, Server, Fusion g. Third Party Library libpng Updated to 1.2.29 Several flaws were discovered in the way third party library libpng handled various PNG image chunks. An attacker could create a carefully crafted PNG image file in such a way that it causes an application linked with libpng to crash when the file is manipulated. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2007-5269 to this issue. NOTE: There are multiple patches required to remediate the issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= =================== VirtualCenter any Windows not affected hosted * any any not affected ESXi 3.5 ESXi affected, patch pending ESX 3.5 ESX affected, patch pending ESX 3.0.3 ESX ESX303-200808404-SG ESX303-200808403-SG ESX 3.0.2 ESX ESX-1005109 ESX-1005114 ESX-1005113 ESX 3.0.1 ESX ESX-1005112 ESX-1005108 ESX-1005111 ESX 2.5.5 ESX affected, patch pending ESX 2.5.4 ESX affected, patch pending * hosted products are VMware Workstation, Player, ACE, Server, Fusion II ESX Service Console rpm updates a. update to bind This update upgrades the service console rpms for bind-utils and bind-lib to version 9.2.4-22.el3. Version 9.2.4.-22.el3 addresses the recently discovered vulnerability in the BIND software used for Domain Name resolution (DNS). VMware doesn't install all the BIND packages on ESX Server and is not vulnerable by default to the reported vulnerability. Of the BIND packages, VMware only ships bind-util and bind-lib in the service console and these components by themselves cannot be used to setup a DNS server. Bind-lib and bind-util are used in client DNS applications like nsupdate, nslookup, etc. VMware explicitly discourages installing applications like BIND on the service console. In case the customer has installed BIND, and the DNS server is configured to support recursive queries, their ESX Server system is affected and they should replace BIND with a patched version. Note: ESX Server will use the DNS server on the network it is on, so it is important to patch that DNS server. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2008-1447 to this issue. VMware Product Running Replace with/ Product Version on Apply Patch ============= ======== ======= =================== VirtualCenter any Windows not affected hosted * any any not affected ESXi 3.5 ESXi not affected ESX 3.5 ESX patch pending ESX 3.0.3 ESX ESX303-200808406-SG ESX 3.0.2 ESX ESX-1006356 ESX 3.0.1 ESX ESX-1005117 ESX 2.5.5 ESX patch pending ESX 2.5.4 ESX patch pending * hosted products are VMware Workstation, Player, ACE, Server, Fusion 4. Solution Please review the patch/release notes for your product and version and verify the md5sum of your downloaded file. VMware Workstation 6.0.5 ------------------------ http://www.vmware.com/download/ws/ Release notes: http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html Windows binary md5sum: 46b4c54f0493f59f52ac6c2965296859 RPM Installation file for 32-bit Linux md5sum: 49ebfbd05d146ecc43262622ab746f03 tar Installation file for 32-bit Linux md5sum: 14ac93bffeee72528629d4caecc5ef37 RPM Installation file for 64-bit Linux md5sum: 0a856f1a1a31ba3c4b08bcf85d97ccf6 tar Installation file for 64-bit Linux md5sum: 3b459254069d663e9873a661bc97cf6c VMware Workstation 5.5.8 ------------------------ http://www.vmware.com/download/ws/ws5.html Release notes: http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html Windows binary: md5sum: 745c3250e5254eaf6e65fcfc4172070f Compressed Tar archive for 32-bit Linux md5sum: 65a454749d15d4863401619d7ff5566e Linux RPM version for 32-bit Linux md5sum: d80adc73b1500bdb0cb24d1b0733bcff VMware Player 2.0.5 and 1.0.8 ----------------------------- http://www.vmware.com/download/player/ Release notes Player 1.x: http://www.vmware.com/support/player/doc/releasenotes_player.html Release notes Player 2.0 http://www.vmware.com/support/player2/doc/releasenotes_player2.html 2.0.5 Windows binary md5sum: 60265438047259b23ff82fdfe737f969 VMware Player 2.0.5 for Linux (.rpm) md5sum: 3bc81e203e947e6ca5b55b3f33443d34 VMware Player 2.0.5 for Linux (.tar) md5sum: f499603d790edc5aa355e45b9c5eae01 VMware Player 2.0.5 - 64-bit (.rpm) md5sum: 85bc2f11d06c362feeff1a64ee5a6834 VMware Player 2.0.5 - 64-bit (.tar) md5sum: b74460bb961e88817884c7e2c0f30215 1.0.8 Windows binary md5sum: e5f927304925297a7d869f74b7b9b053 Player 1.0.8 for Linux (.rpm) md5sum: a13fdb8d72b661cefd24e7dcf6e2a990 Player 1.0.8 for Linux (.tar) md5sum: 99fbe861253eec5308d8c47938e8ad1e VMware ACE 2.0.5 ---------------- http://www.vmware.com/download/ace/ Release notes 2.0: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html ACE Manager Server Virtual Appliance Virtual Appliance for the ACE Management Server md5sum: 41e7349f3b6568dffa23055bb629208d ACE for Window 32-bit and 64-bit Main installation file for Windows 32-bit and 64-bit host (ACE Option Page key required for enabling ACE authoring) md5sum:46b4c54f0493f59f52ac6c2965296859 ACE Management Server for Windows ACE Management Server installation file for Windows md5sum:33a015c4b236329bcb7e12c82271c417 ACE Management Server for Red Hat Enterprise Linux 4 ACE Management Server installation file for Red Hat Enterprise Linux 4 md5sum:dc3bd89fd2285f41ed42f8b28cd5535f ACE Management Server for SUSE Enterprise Linux 9 ACE Management Server installation file for SUSE Enterprise Linux 9 md5sum:2add6a4fc97e1400fb2f94274ce0dce0 VMware ACE 1.0.7 ---------------- http://www.vmware.com/download/ace/ Release notes: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html md5sum: 42d806cddb8e9f905722aeac19740f33 VMware Server 1.0.7 ------------------- http://www.vmware.com/download/server/ Release notes: http://www.vmware.com/support/server/doc/releasenotes_server.html VMware Server for Windows 32-bit and 64-bit md5sum: 2e2ee5ebe08ae48eac5e661cad01acf6 VMware Server Windows client package md5sum: ce7d906a5a8de37cbc20db4332de1adb VMware Server for Linux md5sum: 04f201122b16222cd58fc81ca814ff8c VMware Server for Linux rpm md5sum: 6bae706df040c35851823bc087597d8d Management Interface md5sum: e67489bd2f23bcd4a323d19df4e903e8 VMware Server Linux client package md5sum: 99f1107302111ffd3f766194a33d492b ESX --- ESX 3.5.0 patch ESX350-200806203-UG (VCB) http://download3.vmware.com/software/esx/ESX350-200806203-UG.zip md5sum: 3bd512dc8aa2b276f7cfd19080d193c9 http://kb.vmware.com/kb/1005896 ESX 3.0.3 patch ESX303-200808403-SG (libpng) http://download3.vmware.com/software/vi/ESX303-200808403-SG.zip md5sum: 5f1e75631e53c0e9e013acdbe657cfc7 http://kb.vmware.com/kb/1006034 ESX 3.0.3 patch ESX303-200808404-SG (libpng) http://download3.vmware.com/software/vi/ESX303-200808404-SG.zip md5sum: 65468a5b6ba105cfde1dd444d77b2df4 http://kb.vmware.com/kb/1006035 ESX 3.0.3 patch ESX303-200808406-SG (bind) http://download3.vmware.com/software/vi/ESX303-200808406-SG.zip md5sum: a11273e8d430e5784071caff673995f4 http://kb.vmware.com/kb/1006357 ESX 3.0.3 patch (VCB) ESX 3.0.2 patch ESX-1005109 (libpng) http://download3.vmware.com/software/vi/ESX-1005109.tgz md5sum: 456d74d94317f852024aed5d3852be09 http://kb.vmware.com/kb/1005109 ESX 3.0.2 patch ESX-1005113 (libpng) http://download3.vmware.com/software/vi/ESX-1005113.tgz md5sum: 5d604f2bfd90585b9c8679f5fc8c31b7 http://kb.vmware.com/kb/1005113 ESX 3.0.2 patch ESX-1005114 (libpng) http://download3.vmware.com/software/vi/ESX-1005114.tgz md5sum: 3b6d33b334f0020131580fdd8f9b5365 http://kb.vmware.com/kb/1005114 ESX 3.0.2 patch ESX-1004824 (VCB) http://download3.vmware.com/software/vi/ESX-1004824.tgz md5sum: c72b0132c9f5d7b4cb1b9e47748a9c5b http://kb.vmware.com/kb/1004824 ESX 3.0.2 patch ESX-1006356 (bind) http://download3.vmware.com/software/vi/ESX-1006356.tgz md5sum: f0bc9d0b641954145df3986cdb1c2bab http://kb.vmware.com/kb/1006356 ESX 3.0.1 patch ESX-1005111 (libpng) http://download3.vmware.com/software/vi/ESX-1005111.tgz md5sum: 60e1be9b41070b3531c06f9a0595e24c http://kb.vmware.com/kb/1005111 ESX 3.0.1 patch ESX-1005112 (libpng) http://download3.vmware.com/software/vi/ESX-1005112.tgz md5sum: ad645cef0f9fa18bb648ba5a37074732 http://kb.vmware.com/kb/1005112 ESX 3.0.1 patch ESX-1005108 (libpng) http://download3.vmware.com/software/vi/ESX-1005108.tgz md5sum: aabc873d978f023c929ccd9a54588ea5 http://kb.vmware.com/kb/1005108 ESX 3.0.1 patch ESX-1004823 (VCB) http://download3.vmware.com/software/vi/ESX-1004823.tgz md5sum: 5ff2e8ce50c18afca76fb16c28415a59 http://kb.vmware.com/kb/1004823 ESX 3.0.1 patch ESX-1005117 (bind) http://download3.vmware.com/software/vi/ESX-1005117.tgz md5sum: 5271ecc6e36fb6f1fdf372e57891aa33 http://kb.vmware.com/kb/1005117 5. References CVE numbers http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2101 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5269 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3691 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3692 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3693 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3694 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3695 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5438 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3696 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3697 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3698 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1806 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1807 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1808 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5503 - ------------------------------------------------------------------------ 6. Change log 2008-08-29 VMSA-2008-0014 initial release - ------------------------------------------------------------------------ 7. Contact E-mail list for product security notifications and announcements: http://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce This Security Advisory is posted to the following lists: * security-announce at lists.vmware.com * bugtraq at securityfocus.com * full-disclosure at lists.grok.org.uk E-mail: security at vmware.com PGP key at: http://kb.vmware.com/kb/1055 VMware Security Center http://www.vmware.com/security VMware security response policy http://www.vmware.com/support/policies/security_response.html General support life cycle policy http://www.vmware.com/support/policies/eos.html VMware Infrastructure support life cycle policy http://www.vmware.com/support/policies/eos_vi.html Copyright 2008 VMware Inc. All rights reserved. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFIuI98S2KysvBH1xkRCJp7AJ9Mq0+CEdoQRLzPLSRbv5OLqXqUHACfUSRt bZpHL8qHcNwAiTVz6P3+W6E= =PQ58 -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-190B Multiple DNS implementations vulnerable to cache poisoning Original release date: July 08, 2008 Last revised: -- Source: US-CERT Systems Affected Systems implementing: * Caching DNS resolvers * DNS stub resolvers Affected systems include both client and server systems, and any other networked systems that include this functionality. Effective attack techniques against these vulnerabilities have been demonstrated. Examples of these vulnerabilities can be found in Vulnerability Note VU#800113. Recent research into these and other related vulnerabilities has produced extremely effective exploitation methods to achieve cache poisoning. Tools and techniques have been developed that can reliably poison a domain of the attacker's choosing on most current implementations. As a result, the consensus of DNS software implementers is to implement source port randomization in their resolvers as a mitigation. II. Impact An attacker with the ability to conduct a successful cache poisoning attack can cause a nameserver's clients to contact the incorrect, and possibly malicious, hosts for particular services. Consequently, web traffic, email, and other important network data can be redirected to systems under the attacker's control. III. Solution Apply a patch from your vendor Patches have been released by a number of vendors to implement source port randomization in the nameserver. This change significantly reduces the practicality of cache poisoning attacks. Please see the Systems Affected section of Vulnerability Note VU#800113 for additional details for specific vendors. As mentioned above, stub resolvers are also vulnerable to these attacks. Stub resolvers that will issue queries in response to attacker behavior, and may receive packets from an attacker, should be patched. System administrators should be alert for patches to client operating systems that implement port randomization in the stub resolver. Workarounds Restrict access Administrators, particularly those who are unable to apply a patch, can limit exposure to this vulnerability by restricting sources that can ask for recursion. Note that restricting access will still allow attackers with access to authorized hosts to exploit this vulnerability. Filter traffic at network perimeters Because the ability to spoof IP addresses is necessary to conduct these attacks, administrators should take care to filter spoofed addresses at the network perimeter. IETF Request for Comments (RFC) documents RFC 2827, RFC 3704, and RFC 3013 describe best current practices (BCPs) for implementing this defense. It is important to understand your network's configuration and service requirements before deciding what changes are appropriate. Run a local DNS cache In lieu of strong port randomization characteristics in a stub resolver, administrators can protect their systems by using local caching full-service resolvers, both on the client systems and on servers that are topologically close on the network to the client systems. This should be done in conjunction with the network segmentation and filtering strategies mentioned above. Disable recursion Disable recursion on any nameserver responding to DNS requests made by untrusted systems. Implement source port randomization Vendors that implement DNS software are encouraged to review IETF Internet Draft, "Measures for making DNS more resilient against forged answers," for additional information about implementing mitigations in their products. This document is a work in progress and may change prior to its publication as an RFC, if it is approved. IV. References * US-CERT Vulnerability Note VU#800113 - <http://www.kb.cert.org/vuls/id/800113> * US-CERT Vulnerability Note VU#484649 - <http://www.kb.cert.org/vuls/id/484649> * US-CERT Vulnerability Note VU#252735 - <http://www.kb.cert.org/vuls/id/252735> * US-CERT Vulnerability Note VU#927905 - <http://www.kb.cert.org/vuls/id/927905> * US-CERT Vulnerability Note VU#457875 - <http://www.kb.cert.org/vuls/id/457875> * Internet Draft: Measures for making DNS more resilient against forged answers - <http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience> * RFC 3833 - <http://tools.ietf.org/html/rfc3833> * RFC 2827 - <http://tools.ietf.org/html/rfc2827> * RFC 3704 - <http://tools.ietf.org/html/rfc3704> * RFC 3013 - <http://tools.ietf.org/html/rfc3013> * Microsoft Security Bulletin MS08-037 - <http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx> * Internet Systems Consortium BIND Vulnerabilities - <http://www.isc.org/sw/bind/bind-security.php> ____________________________________________________________________ US-CERT thanks Dan Kaminsky of IOActive and Paul Vixie of Internet Systems Consortium (ISC) for notifying us about this problem and for helping us to construct this advisory. ____________________________________________________________________ The most recent version of this document can be found at: <http://www.us-cert.gov/cas/techalerts/TA08-190B.html> ____________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. ____________________________________________________________________ Produced 2008 by US-CERT, a government organization. Release Date: 2008-07-16 Last Updated: 2010-12-15 ----------------------------------------------------------------------------- Potential Security Impact: Remote DNS cache poisoning Source: Hewlett-Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP-UX running BIND. References: CVE-2008-1447 SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HP-UX B.11.11, B.11.23, B.11.31 running BIND v9.3.2 or BIND v9.2.0, HP-UX B.11.11 running BIND v8.1.2 BACKGROUND CVSS 2.0 Base Metrics =========================================================== Reference Base Vector Base Score CVE-2008-1447 (AV:N/AC:L/Au:N/C:P/I:P/A:P) 7.5 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002 RESOLUTION HP has provided the following software updates / patch to resolve the vulnerabilities for BIND v9.2.0 and BIND v9.3.2. Customers running BIND v8.1.2 on HP-UX B.11.11 should upgrade to BIND v9.2.0 or BIND v9.3.2 and apply the updates listed below. A new BIND v9.2.0 depot is available to address an issue encountered on HP-UX B.11.11. The new depot is available by contacting HP Support. The BIND v9.3.2 updates are available for download from: http://software.hp.com The patch PHNE_37865 is available from: http://itrc.hp.com HP-UX Release / Action B.11.11 running v8.1.2 / Upgrade to BIND v9.2.0 or BIND v9.3.2 and apply the updates listed below, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. HP-UX Release / BIND Depot name / Action B.11.11 running v9.2.0 / BIND920V15.depot / Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. HP-UX Release / Action B.11.23 running v9.2.0 / Install PHNE_37865 or subsequent; Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. HP-UX Release / Action B.11.11 running v9.3.2 / Install revision C.9.3.2.7.0 or subsequent; Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. B.11.23 running v9.3.2 / Install revision C.9.3.2.7.0 or subsequent; Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. B.11.31 running v9.3.2 / Install revision C.9.3.2.3.0 or subsequent; Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. Note: Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. Note: Firewall configurations may need to be adjusted to allow DNS queries from random source ports to pass. In addition, firewalls that forward DNS queries must not replace the random source ports. MANUAL ACTIONS: Yes - NonUpdate Remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. Check firewall settings. For B.11.11 running v8.1.2, upgrade to BIND v9.2.0 or BIND v9.3.2 and apply the updates For B.11.11 running v9.2.0 install BIND920v15.depot PRODUCT SPECIFIC INFORMATION HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all HP-issued Security Bulletins and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see: https://www.hp.com/go/swa AFFECTED VERSIONS For BIND v8.1.2 HP-UX B.11.11 ============= InternetSrvcs.INETSVCS-RUN action: upgrade to BIND v9.2.0 or BIND v9.3.2 and apply the updates, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. For BIND v9.3.2 HP-UX B.11.11 ============= BindUpgrade.BIND-UPGRADE action: install revision C.9.3.2.7.0 or subsequent, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. URL: http://software.hp.com HP-UX B.11.23 ============= BindUpgrade.BIND-UPGRADE BindUpgrade.BIND2-UPGRADE action: install revision C.9.3.2.7.0 or subsequent, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. URL: http://software.hp.com HP-UX B.11.31 ============= NameService.BIND-AUX NameService.BIND-RUN action: install revision C.9.3.2.7.0 or subsequent, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. URL: http://software.hp.com For BIND v9.2.0 HP-UX B.11.11 ============= BINDv920.INETSVCS-BIND action: install revision B.11.11.01.015 or subsequent, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. URL Contact HP Support for information on where to download depot. HP-UX B.11.23 ============= InternetSrvcs.INETSVCS-INETD InternetSrvcs.INETSVCS-RUN InternetSrvcs.INETSVCS2-RUN action: install patch PHNE_37865 or subsequent, remove "query-source port" and "query-source-v6 port" options in /etc/named.conf. URL: http://itrc.hp.com END AFFECTED VERSIONS HISTORY Version:1 (rev.1) - 16 July 2008 Initial release Version:2 (rev.2) - 19 July 2008 Added BIND v9.2.0 depot information Version:3 (rev.3) - 06 August 2008 Updated patch location, revised BIND v9.2.0 depot information, added BIND v8.1.2 Version:4 (rev.4) - 08 August 2008 Updated manual actions to include named.conf and firewall configuration setings Version:5 (rev.5) - 12 October 2010 Updated version for BIND v9.2.0 depot for B.11.11 Version:6 (rev.6) - 15 December 2010 Reformat v9.2.0 recommendation for clarity. Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy. Support: For further information, contact normal HP Services support channel. Report: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information. To get the security-alert PGP key, please send an e-mail message as follows: To: security-alert@hp.com Subject: get key Subscribe: To initiate a subscription to receive future HP Security Bulletins via Email: http://h30046.www3.hp.com/driverAlertProfile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&topiccode=ITRC On the web page: ITRC security bulletins and patch sign-up Under Step1: your ITRC security bulletins and patches -check ALL categories for which alerts are required and continue. Under Step2: your ITRC operating systems -verify your operating system selections are checked and save. To update an existing subscription: http://h30046.www3.hp.com/subSignIn.php Log in on the web page: Subscriber's choice for Business: sign-in. On the web page: Subscriber's Choice: your profile summary - use Edit Profile to update appropriate sections. To review previously published Security Bulletins visit: http://www.itrc.hp.com/service/cki/secBullArchive.do * The Software Product Category that this Security Bulletin relates to is represented by the 5th and 6th characters of the Bulletin number in the title: GN = HP General SW MA = HP Management Agents MI = Misc. 3rd Party SW MP = HP MPE/iX NS = HP NonStop Servers OV = HP OpenVMS PI = HP Printing & Imaging ST = HP Storage SW TL = HP Trusted Linux TU = HP Tru64 UNIX UX = HP-UX VV = HP VirtualVault System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions. "HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement." Copyright 2009 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. Corrected: 2008-07-12 10:07:33 UTC (RELENG_6, 6.3-STABLE) 2008-07-13 18:42:38 UTC (RELENG_6_3, 6.3-RELEASE-p3) 2008-07-13 18:42:38 UTC (RELENG_7, 7.0-STABLE) 2008-07-13 18:42:38 UTC (RELENG_7_0, 7.0-RELEASE-p3) CVE Name: CVE-2008-1447 For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit <URL:http://security.FreeBSD.org/>. Background BIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet Domain Name Server. DNS requests contain a query id which is used to match a DNS request with the response and to make it harder for anybody but the DNS server which received the request to send a valid response. This allows the attacker to influence or control the results of DNS queries being returned to users from target systems. To limit the machines able to perform recursive queries, add an ACL in named.conf and limit recursion like the following: acl example-acl { 192.0.2.0/24; }; options { recursion yes; allow-recursion { example-acl; }; }; V. Solution Perform one of the following: 1) Upgrade your vulnerable system to 6-STABLE or 7-STABLE, or to the RELENG_7_0 or RELENG_6_3 security branch dated after the correction date. 2) To patch your present system: The following patches have been verified to apply to FreeBSD 6.3 and 7.0 systems. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. [FreeBSD 6.3] # fetch http://security.FreeBSD.org/patches/SA-08:06/bind63.patch # fetch http://security.FreeBSD.org/patches/SA-08:06/bind63.patch.asc [FreeBSD 7.0] # fetch http://security.FreeBSD.org/patches/SA-08:06/bind7.patch # fetch http://security.FreeBSD.org/patches/SA-08:06/bind7.patch.asc b) Execute the following commands as root: # cd /usr/src # patch < /path/to/patch # cd /usr/src/lib/bind # make obj && make depend && make && make install # cd /usr/src/usr.sbin/named # make obj && make depend && make && make install NOTE WELL: This update causes BIND to choose a new, random UDP port for each new query; this may cause problems for some network configurations, particularly if firewall(s) block incoming UDP packets on particular ports. The avoid-v4-udp-ports and avoid-v6-udp-ports options should be used to avoid selecting random port numbers within a blocked range. Consequently it is strongly recommended that these options not be used to specify fixed port numbers. VI. Correction details The following list contains the revision numbers of each file that was corrected in FreeBSD. Branch Revision Path - ------------------------------------------------------------------------- RELENG_6 src/contrib/bind9/bin/named/client.c 1.1.1.2.2.5 src/contrib/bind9/bin/named/server.c 1.1.1.2.2.4 src/contrib/bind9/lib/dns/api 1.1.1.2.2.5 src/contrib/bind9/lib/dns/dispatch.c 1.1.1.1.4.4 src/contrib/bind9/lib/dns/include/dns/dispatch.h 1.1.1.1.4.3 src/contrib/bind9/lib/dns/resolver.c 1.1.1.2.2.8 RELENG_6_3 src/UPDATING 1.416.2.37.2.8 src/sys/conf/newvers.sh 1.69.2.15.2.7 src/contrib/bind9/bin/named/client.c 1.1.1.2.2.3.2.1 src/contrib/bind9/bin/named/server.c 1.1.1.2.2.2.2.1 src/contrib/bind9/lib/dns/api 1.1.1.2.2.3.2.1 src/contrib/bind9/lib/dns/dispatch.c 1.1.1.1.4.2.2.1 src/contrib/bind9/lib/dns/include/dns/dispatch.h 1.1.1.1.4.1.2.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.2.2.6.2.1 RELENG_7 src/contrib/bind9/bin/named/client.c 1.1.1.6.2.2 src/contrib/bind9/bin/named/server.c 1.1.1.6.2.2 src/contrib/bind9/lib/dns/api 1.1.1.6.2.2 src/contrib/bind9/lib/dns/dispatch.c 1.1.1.4.2.2 src/contrib/bind9/lib/dns/include/dns/dispatch.h 1.1.1.3.2.2 src/contrib/bind9/lib/dns/resolver.c 1.1.1.9.2.2 RELENG_7_0 src/UPDATING 1.507.2.3.2.7 src/sys/conf/newvers.sh 1.72.2.5.2.7 src/contrib/bind9/bin/named/client.c 1.1.1.6.2.1.2.1 src/contrib/bind9/bin/named/server.c 1.1.1.6.2.1.2.1 src/contrib/bind9/lib/dns/api 1.1.1.6.2.1.2.1 src/contrib/bind9/lib/dns/dispatch.c 1.1.1.4.2.1.2.1 src/contrib/bind9/lib/dns/include/dns/dispatch.h 1.1.1.3.2.1.2.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.9.2.1.2.1 - ------------------------------------------------------------------------- VII

Trust: 4.41

sources: NVD: CVE-2008-1447 // CERT/CC: VU#927905 // CERT/CC: VU#800113 // CERT/CC: VU#252735 // VULHUB: VHN-31572 // VULMON: CVE-2008-1447 // PACKETSTORM: 74443 // PACKETSTORM: 58910 // PACKETSTORM: 68129 // PACKETSTORM: 73732 // PACKETSTORM: 68036 // PACKETSTORM: 68118 // PACKETSTORM: 68502 // PACKETSTORM: 130183 // PACKETSTORM: 69536 // PACKETSTORM: 129616 // PACKETSTORM: 68061 // PACKETSTORM: 96747 // PACKETSTORM: 68183

AFFECTED PRODUCTS

vendor:	internet consortium	model:	-	scope:	-	version:	-	Trust: 2.4
vendor:	debian gnu linux	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	fujitsu	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	openwall gnu linux	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	red hat	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	suse linux	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	sun microsystems	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	ubuntu	model:	-	scope:	-	version:	-	Trust: 1.6
vendor:	isc	model:	bind	scope:	eq	version:	4	Trust: 1.0
vendor:	isc	model:	bind	scope:	eq	version:	8	Trust: 1.0
vendor:	isc	model:	bind	scope:	eq	version:	9.2.9	Trust: 1.0
vendor:	alcatel lucent	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	apple computer	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	avaya	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	blue coat	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	bluecat	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	force10	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	freebsd	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	funkwerk	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	gentoo linux	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	hewlett packard	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	ibm	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	infoblox	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	mandriva	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	microsoft	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	nec	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	nixu	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	nominum	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	nortel	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	novell	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	openbsd	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	qnx	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	secure computing network security division	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	slackware linux	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	wind river	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	yamaha	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	dnsmasq	model:	-	scope:	-	version:	-	Trust: 0.8

sources: CERT/CC: VU#800113 // CERT/CC: VU#927905 // CERT/CC: VU#252735 // NVD: CVE-2008-1447

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2008-1447
value:	MEDIUM
Trust: 1.0
CARNEGIE MELLON:	VU#800113
value:	27.54
Trust: 0.8
CARNEGIE MELLON:	VU#927905
value:	2.14
Trust: 0.8
CARNEGIE MELLON:	VU#252735
value:	3.83
Trust: 0.8
VULHUB:	VHN-31572
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2008-1447
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2008-1447
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-31572
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2008-1447
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.2
impactScore:	4.0
version:	3.1
Trust: 1.0

sources: CERT/CC: VU#800113 // CERT/CC: VU#927905 // CERT/CC: VU#252735 // VULHUB: VHN-31572 // VULMON: CVE-2008-1447 // NVD: CVE-2008-1447

PROBLEMTYPE DATA

problemtype:	CWE-331	Trust: 1.1
problemtype:	CWE-310	Trust: 0.1

sources: VULHUB: VHN-31572 // NVD: CVE-2008-1447

THREAT TYPE

remote

Trust: 0.1

sources: PACKETSTORM: 68183

TYPE

arbitrary

Trust: 0.1

sources: PACKETSTORM: 68502

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-31572 // VULMON: CVE-2008-1447

PATCH

title:	Debian CVElist Bug Report Logs: dnsmasq: appears to be vulnerable to cache poisoning attack CVE-2008-1447	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=bea0103df57677c569776d970bb2ff1a	Trust: 0.1
title:	Ubuntu Security Notice: bind9 vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-622-1	Trust: 0.1
title:	Ubuntu Security Notice: dnsmasq vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-627-1	Trust: 0.1
title:	Debian Security Advisories: DSA-1605-1 glibc -- DNS cache poisoning	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=26abd8c8b0e5ca972a55a1b90d3fdfc5	Trust: 0.1
title:	Debian Security Advisories: DSA-1617-1 refpolicy -- incompatible policy	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=3418f614f56d497e28f842674f8d8f8c	Trust: 0.1
title:	Debian Security Advisories: DSA-1603-1 bind9 -- DNS cache poisoning	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=23e55365f62c349622abb2d713a280af	Trust: 0.1
title:	Debian CVElist Bug Report Logs: appears to be vulnerable to cache poisoning attack CVE-2008-1447	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=9e131108e982a49c97c4f3c5801dfb53	Trust: 0.1
title:	Debian CVElist Bug Report Logs: python-dns vulnerable to CVE-2008-1447 DNS source port guessable	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=2a465496dabf8f2d87b1ff911ad8df9b	Trust: 0.1
title:	Symantec Security Advisories: SA26 : DNS Cache Poisoning Vulnerability (CERT VU#800113)	url:	https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories&qid=078765ce503e834a2fa43ae116b70180	Trust: 0.1
title:	Citrix Security Bulletins: Archive: Vulnerability in Access Gateway Standard and Advanced Edition Appliance firmware could result in DNS Cache Poisoning	url:	https://vulmon.com/vendoradvisory?qidtp=citrix_security_bulletins&qid=df5619e77c6173020dc0459f4b4bf1f2	Trust: 0.1
title:	Citrix Security Bulletins: Archive: Vulnerability in NetScaler and Access Gateway Enterprise Edition could result in DNS Cache Poisoning	url:	https://vulmon.com/vendoradvisory?qidtp=citrix_security_bulletins&qid=5c63f9f5138045493cfb7d220588077b	Trust: 0.1
title:	Ubuntu Security Notice: ruby1.8 vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-651-1	Trust: 0.1
title:	VMware Security Advisories: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.	url:	https://vulmon.com/vendoradvisory?qidtp=vmware_security_advisories&qid=f3db6c283715ce027fe46e96804874b4	Trust: 0.1

sources: VULMON: CVE-2008-1447

EXTERNAL IDS

db:	NVD	id:	CVE-2008-1447	Trust: 2.4
db:	CERT/CC	id:	VU#800113	Trust: 2.2
db:	USCERT	id:	TA08-190B	Trust: 1.3
db:	VUPEN	id:	ADV-2008-2025	Trust: 1.2
db:	VUPEN	id:	ADV-2009-0297	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2334	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2383	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2113	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2558	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2019	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2377	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2584	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2342	Trust: 1.2
db:	VUPEN	id:	ADV-2010-0622	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2166	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2051	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2092	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2029	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2384	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2268	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2052	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2549	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2197	Trust: 1.2
db:	VUPEN	id:	ADV-2009-0311	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2055	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2467	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2123	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2482	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2525	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2023	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2582	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2114	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2196	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2139	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2466	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2050	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2195	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2291	Trust: 1.2
db:	VUPEN	id:	ADV-2008-2030	Trust: 1.2
db:	SECTRACK	id:	1020548	Trust: 1.2
db:	SECTRACK	id:	1020578	Trust: 1.2
db:	SECTRACK	id:	1020448	Trust: 1.2
db:	SECTRACK	id:	1020558	Trust: 1.2
db:	SECTRACK	id:	1020702	Trust: 1.2
db:	SECTRACK	id:	1020440	Trust: 1.2
db:	SECTRACK	id:	1020575	Trust: 1.2
db:	SECTRACK	id:	1020437	Trust: 1.2
db:	SECTRACK	id:	1020802	Trust: 1.2
db:	SECTRACK	id:	1020449	Trust: 1.2
db:	SECTRACK	id:	1020579	Trust: 1.2
db:	SECTRACK	id:	1020561	Trust: 1.2
db:	SECTRACK	id:	1020804	Trust: 1.2
db:	SECTRACK	id:	1020577	Trust: 1.2
db:	SECTRACK	id:	1020560	Trust: 1.2
db:	SECTRACK	id:	1020651	Trust: 1.2
db:	SECTRACK	id:	1020653	Trust: 1.2
db:	SECTRACK	id:	1020438	Trust: 1.2
db:	SECTRACK	id:	1020576	Trust: 1.2
db:	SECUNIA	id:	31209	Trust: 1.2
db:	SECUNIA	id:	31197	Trust: 1.2
db:	SECUNIA	id:	31422	Trust: 1.2
db:	SECUNIA	id:	30977	Trust: 1.2
db:	SECUNIA	id:	31151	Trust: 1.2
db:	SECUNIA	id:	31354	Trust: 1.2
db:	SECUNIA	id:	31093	Trust: 1.2
db:	SECUNIA	id:	31212	Trust: 1.2
db:	SECUNIA	id:	31207	Trust: 1.2
db:	SECUNIA	id:	31221	Trust: 1.2
db:	SECUNIA	id:	31254	Trust: 1.2
db:	SECUNIA	id:	31451	Trust: 1.2
db:	SECUNIA	id:	31169	Trust: 1.2
db:	SECUNIA	id:	30988	Trust: 1.2
db:	SECUNIA	id:	30973	Trust: 1.2
db:	SECUNIA	id:	31687	Trust: 1.2
db:	SECUNIA	id:	31199	Trust: 1.2
db:	SECUNIA	id:	30980	Trust: 1.2
db:	SECUNIA	id:	31137	Trust: 1.2
db:	SECUNIA	id:	30998	Trust: 1.2
db:	SECUNIA	id:	31014	Trust: 1.2
db:	SECUNIA	id:	31065	Trust: 1.2
db:	SECUNIA	id:	31882	Trust: 1.2
db:	SECUNIA	id:	31019	Trust: 1.2
db:	SECUNIA	id:	31153	Trust: 1.2
db:	SECUNIA	id:	31482	Trust: 1.2
db:	SECUNIA	id:	31495	Trust: 1.2
db:	SECUNIA	id:	33178	Trust: 1.2
db:	SECUNIA	id:	33714	Trust: 1.2
db:	SECUNIA	id:	31213	Trust: 1.2
db:	SECUNIA	id:	31326	Trust: 1.2
db:	SECUNIA	id:	31052	Trust: 1.2
db:	SECUNIA	id:	31011	Trust: 1.2
db:	SECUNIA	id:	31588	Trust: 1.2
db:	SECUNIA	id:	31033	Trust: 1.2
db:	SECUNIA	id:	31031	Trust: 1.2
db:	SECUNIA	id:	31430	Trust: 1.2
db:	SECUNIA	id:	30979	Trust: 1.2
db:	SECUNIA	id:	31022	Trust: 1.2
db:	SECUNIA	id:	31094	Trust: 1.2
db:	SECUNIA	id:	31030	Trust: 1.2
db:	SECUNIA	id:	31204	Trust: 1.2
db:	SECUNIA	id:	30925	Trust: 1.2
db:	SECUNIA	id:	31072	Trust: 1.2
db:	SECUNIA	id:	31152	Trust: 1.2
db:	SECUNIA	id:	31237	Trust: 1.2
db:	SECUNIA	id:	31012	Trust: 1.2
db:	SECUNIA	id:	33786	Trust: 1.2
db:	SECUNIA	id:	31143	Trust: 1.2
db:	SECUNIA	id:	31236	Trust: 1.2
db:	SECUNIA	id:	31900	Trust: 1.2
db:	SECUNIA	id:	30989	Trust: 1.2
db:	SECUNIA	id:	31823	Trust: 1.2
db:	USCERT	id:	TA08-260A	Trust: 1.2
db:	USCERT	id:	TA08-190A	Trust: 1.2
db:	BID	id:	30131	Trust: 1.2
db:	EXPLOIT-DB	id:	6130	Trust: 1.2
db:	EXPLOIT-DB	id:	6123	Trust: 1.2
db:	EXPLOIT-DB	id:	6122	Trust: 1.2
db:	SECUNIA	id:	26629	Trust: 1.0
db:	CERT/CC	id:	VU#927905	Trust: 1.0
db:	CERT/CC	id:	VU#252735	Trust: 0.9
db:	EXPLOIT-DB	id:	4266	Trust: 0.8
db:	SECUNIA	id:	26195	Trust: 0.8
db:	PACKETSTORM	id:	68118	Trust: 0.2
db:	PACKETSTORM	id:	68502	Trust: 0.2
db:	PACKETSTORM	id:	68061	Trust: 0.2
db:	PACKETSTORM	id:	74443	Trust: 0.2
db:	PACKETSTORM	id:	96747	Trust: 0.2
db:	PACKETSTORM	id:	68183	Trust: 0.2
db:	PACKETSTORM	id:	73732	Trust: 0.2
db:	PACKETSTORM	id:	68036	Trust: 0.2
db:	PACKETSTORM	id:	68129	Trust: 0.2
db:	PACKETSTORM	id:	68878	Trust: 0.1
db:	PACKETSTORM	id:	68038	Trust: 0.1
db:	PACKETSTORM	id:	68755	Trust: 0.1
db:	PACKETSTORM	id:	68412	Trust: 0.1
db:	PACKETSTORM	id:	73060	Trust: 0.1
db:	PACKETSTORM	id:	68288	Trust: 0.1
db:	PACKETSTORM	id:	94774	Trust: 0.1
db:	PACKETSTORM	id:	68199	Trust: 0.1
db:	PACKETSTORM	id:	68068	Trust: 0.1
db:	PACKETSTORM	id:	68471	Trust: 0.1
db:	PACKETSTORM	id:	70207	Trust: 0.1
db:	PACKETSTORM	id:	68039	Trust: 0.1
db:	PACKETSTORM	id:	68500	Trust: 0.1
db:	PACKETSTORM	id:	68691	Trust: 0.1
db:	PACKETSTORM	id:	68360	Trust: 0.1
db:	PACKETSTORM	id:	68037	Trust: 0.1
db:	PACKETSTORM	id:	68473	Trust: 0.1
db:	PACKETSTORM	id:	68546	Trust: 0.1
db:	PACKETSTORM	id:	68554	Trust: 0.1
db:	PACKETSTORM	id:	68063	Trust: 0.1
db:	PACKETSTORM	id:	68543	Trust: 0.1
db:	SEEBUG	id:	SSVID-65607	Trust: 0.1
db:	VULHUB	id:	VHN-31572	Trust: 0.1
db:	VULMON	id:	CVE-2008-1447	Trust: 0.1
db:	PACKETSTORM	id:	58910	Trust: 0.1
db:	PACKETSTORM	id:	130183	Trust: 0.1
db:	PACKETSTORM	id:	69536	Trust: 0.1
db:	PACKETSTORM	id:	129616	Trust: 0.1
db:	CERT/CC	id:	VU#484649	Trust: 0.1
db:	CERT/CC	id:	VU#457875	Trust: 0.1

sources: CERT/CC: VU#800113 // CERT/CC: VU#927905 // CERT/CC: VU#252735 // VULHUB: VHN-31572 // VULMON: CVE-2008-1447 // PACKETSTORM: 74443 // PACKETSTORM: 58910 // PACKETSTORM: 68129 // PACKETSTORM: 73732 // PACKETSTORM: 68183 // PACKETSTORM: 68036 // PACKETSTORM: 68118 // PACKETSTORM: 68502 // PACKETSTORM: 130183 // PACKETSTORM: 69536 // PACKETSTORM: 129616 // PACKETSTORM: 68061 // PACKETSTORM: 96747 // NVD: CVE-2008-1447

REFERENCES

url:	http://www.kb.cert.org/vuls/id/800113	Trust: 1.4
url:	http://security.freebsd.org/advisories/freebsd-sa-08:06.bind.asc	Trust: 1.3
url:	http://security.gentoo.org/glsa/glsa-200807-08.xml	Trust: 1.3
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26667	Trust: 1.2
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26668	Trust: 1.2
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26669	Trust: 1.2
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26670	Trust: 1.2
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26671	Trust: 1.2
url:	http://www.ibm.com/support/docview.wss?uid=isg1iz26672	Trust: 1.2
url:	http://lists.apple.com/archives/security-announce//2008/jul/msg00003.html	Trust: 1.2
url:	http://lists.apple.com/archives/security-announce//2008/sep/msg00003.html	Trust: 1.2
url:	http://lists.apple.com/archives/security-announce//2008/sep/msg00004.html	Trust: 1.2
url:	http://lists.apple.com/archives/security-announce//2008/sep/msg00005.html	Trust: 1.2
url:	http://www.securityfocus.com/bid/30131	Trust: 1.2
url:	http://www.securityfocus.com/archive/1/495289/100/0/threaded	Trust: 1.2
url:	http://www.securityfocus.com/archive/1/495869/100/0/threaded	Trust: 1.2
url:	http://www.us-cert.gov/cas/techalerts/ta08-190a.html	Trust: 1.2
url:	http://www.us-cert.gov/cas/techalerts/ta08-190b.html	Trust: 1.2
url:	http://www.us-cert.gov/cas/techalerts/ta08-260a.html	Trust: 1.2
url:	http://www.cisco.com/en/us/products/products_security_advisory09186a00809c2168.shtml	Trust: 1.2
url:	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401	Trust: 1.2
url:	http://support.apple.com/kb/ht3026	Trust: 1.2
url:	http://support.apple.com/kb/ht3129	Trust: 1.2
url:	http://support.citrix.com/article/ctx117991	Trust: 1.2
url:	http://support.citrix.com/article/ctx118183	Trust: 1.2
url:	http://up2date.astaro.com/2008/08/up2date_7202_released.html	Trust: 1.2
url:	http://wiki.rpath.com/wiki/advisories:rpsa-2008-0231	Trust: 1.2
url:	http://wiki.rpath.com/wiki/advisories:rpsa-2010-0018	Trust: 1.2
url:	http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning	Trust: 1.2
url:	http://www.isc.org/index.pl?/sw/bind/bind-security.php	Trust: 1.2
url:	http://www.kb.cert.org/vuls/id/mimg-7dwr4j	Trust: 1.2
url:	http://www.kb.cert.org/vuls/id/mimg-7ecl8q	Trust: 1.2
url:	http://www.novell.com/support/viewcontent.do?externalid=7000912	Trust: 1.2
url:	http://www.phys.uu.nl/~rombouts/pdnsd.html	Trust: 1.2
url:	http://www.phys.uu.nl/~rombouts/pdnsd/changelog	Trust: 1.2
url:	http://www.rtpro.yamaha.co.jp/rt/faq/security/vu800113.html	Trust: 1.2
url:	http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/	Trust: 1.2
url:	http://www.vmware.com/security/advisories/vmsa-2008-0014.html	Trust: 1.2
url:	http://www.debian.org/security/2008/dsa-1603	Trust: 1.2
url:	http://www.debian.org/security/2008/dsa-1604	Trust: 1.2
url:	http://www.debian.org/security/2008/dsa-1605	Trust: 1.2
url:	http://www.debian.org/security/2008/dsa-1619	Trust: 1.2
url:	http://www.debian.org/security/2008/dsa-1623	Trust: 1.2
url:	https://www.exploit-db.com/exploits/6122	Trust: 1.2
url:	https://www.exploit-db.com/exploits/6123	Trust: 1.2
url:	https://www.exploit-db.com/exploits/6130	Trust: 1.2
url:	https://www.redhat.com/archives/fedora-package-announce/2008-july/msg00402.html	Trust: 1.2
url:	https://www.redhat.com/archives/fedora-package-announce/2008-july/msg00458.html	Trust: 1.2
url:	http://lists.grok.org.uk/pipermail/full-disclosure/2008-august/064118.html	Trust: 1.2
url:	http://security.gentoo.org/glsa/glsa-200812-17.xml	Trust: 1.2
url:	http://security.gentoo.org/glsa/glsa-201209-25.xml	Trust: 1.2
url:	http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01662368	Trust: 1.2
url:	http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01523520	Trust: 1.2
url:	http://www.mandriva.com/security/advisories?name=mdvsa-2008:139	Trust: 1.2
url:	http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html	Trust: 1.2
url:	http://www.caughq.org/exploits/cau-ex-2008-0002.txt	Trust: 1.2
url:	http://www.caughq.org/exploits/cau-ex-2008-0003.txt	Trust: 1.2
url:	http://www.doxpara.com/?p=1176	Trust: 1.2
url:	http://www.doxpara.com/dmk_bo2k8.ppt	Trust: 1.2
url:	http://www.nominum.com/asset_upload_file741_2661.pdf	Trust: 1.2
url:	http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html	Trust: 1.2
url:	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037	Trust: 1.2
url:	ftp://ftp.netbsd.org/pub/netbsd/security/advisories/netbsd-sa2008-009.txt.asc	Trust: 1.2
url:	http://www.openbsd.org/errata42.html#013_bind	Trust: 1.2
url:	http://www.openbsd.org/errata43.html#004_bind	Trust: 1.2
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a12117	Trust: 1.2
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a5725	Trust: 1.2
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a5761	Trust: 1.2
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a5917	Trust: 1.2
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a9627	Trust: 1.2
url:	http://rhn.redhat.com/errata/rhsa-2008-0533.html	Trust: 1.2
url:	http://www.redhat.com/support/errata/rhsa-2008-0789.html	Trust: 1.2
url:	http://www.securitytracker.com/id?1020437	Trust: 1.2
url:	http://www.securitytracker.com/id?1020438	Trust: 1.2
url:	http://www.securitytracker.com/id?1020440	Trust: 1.2
url:	http://www.securitytracker.com/id?1020448	Trust: 1.2
url:	http://www.securitytracker.com/id?1020449	Trust: 1.2
url:	http://www.securitytracker.com/id?1020548	Trust: 1.2
url:	http://www.securitytracker.com/id?1020558	Trust: 1.2
url:	http://www.securitytracker.com/id?1020560	Trust: 1.2
url:	http://www.securitytracker.com/id?1020561	Trust: 1.2
url:	http://www.securitytracker.com/id?1020575	Trust: 1.2
url:	http://www.securitytracker.com/id?1020576	Trust: 1.2
url:	http://www.securitytracker.com/id?1020577	Trust: 1.2
url:	http://www.securitytracker.com/id?1020578	Trust: 1.2
url:	http://www.securitytracker.com/id?1020579	Trust: 1.2
url:	http://www.securitytracker.com/id?1020651	Trust: 1.2
url:	http://www.securitytracker.com/id?1020653	Trust: 1.2
url:	http://www.securitytracker.com/id?1020702	Trust: 1.2
url:	http://www.securitytracker.com/id?1020802	Trust: 1.2
url:	http://www.securitytracker.com/id?1020804	Trust: 1.2
url:	http://secunia.com/advisories/30925	Trust: 1.2
url:	http://secunia.com/advisories/30973	Trust: 1.2
url:	http://secunia.com/advisories/30977	Trust: 1.2
url:	http://secunia.com/advisories/30979	Trust: 1.2
url:	http://secunia.com/advisories/30980	Trust: 1.2
url:	http://secunia.com/advisories/30988	Trust: 1.2
url:	http://secunia.com/advisories/30989	Trust: 1.2
url:	http://secunia.com/advisories/30998	Trust: 1.2
url:	http://secunia.com/advisories/31011	Trust: 1.2
url:	http://secunia.com/advisories/31012	Trust: 1.2
url:	http://secunia.com/advisories/31014	Trust: 1.2
url:	http://secunia.com/advisories/31019	Trust: 1.2
url:	http://secunia.com/advisories/31022	Trust: 1.2
url:	http://secunia.com/advisories/31030	Trust: 1.2
url:	http://secunia.com/advisories/31031	Trust: 1.2
url:	http://secunia.com/advisories/31033	Trust: 1.2
url:	http://secunia.com/advisories/31052	Trust: 1.2
url:	http://secunia.com/advisories/31065	Trust: 1.2
url:	http://secunia.com/advisories/31072	Trust: 1.2
url:	http://secunia.com/advisories/31093	Trust: 1.2
url:	http://secunia.com/advisories/31094	Trust: 1.2
url:	http://secunia.com/advisories/31137	Trust: 1.2
url:	http://secunia.com/advisories/31143	Trust: 1.2
url:	http://secunia.com/advisories/31151	Trust: 1.2
url:	http://secunia.com/advisories/31152	Trust: 1.2
url:	http://secunia.com/advisories/31153	Trust: 1.2
url:	http://secunia.com/advisories/31169	Trust: 1.2
url:	http://secunia.com/advisories/31197	Trust: 1.2
url:	http://secunia.com/advisories/31199	Trust: 1.2
url:	http://secunia.com/advisories/31204	Trust: 1.2
url:	http://secunia.com/advisories/31207	Trust: 1.2
url:	http://secunia.com/advisories/31209	Trust: 1.2
url:	http://secunia.com/advisories/31212	Trust: 1.2
url:	http://secunia.com/advisories/31213	Trust: 1.2
url:	http://secunia.com/advisories/31221	Trust: 1.2
url:	http://secunia.com/advisories/31236	Trust: 1.2
url:	http://secunia.com/advisories/31237	Trust: 1.2
url:	http://secunia.com/advisories/31254	Trust: 1.2
url:	http://secunia.com/advisories/31326	Trust: 1.2
url:	http://secunia.com/advisories/31354	Trust: 1.2
url:	http://secunia.com/advisories/31422	Trust: 1.2
url:	http://secunia.com/advisories/31430	Trust: 1.2
url:	http://secunia.com/advisories/31451	Trust: 1.2
url:	http://secunia.com/advisories/31482	Trust: 1.2
url:	http://secunia.com/advisories/31495	Trust: 1.2
url:	http://secunia.com/advisories/31588	Trust: 1.2
url:	http://secunia.com/advisories/31687	Trust: 1.2
url:	http://secunia.com/advisories/31823	Trust: 1.2
url:	http://secunia.com/advisories/31882	Trust: 1.2
url:	http://secunia.com/advisories/31900	Trust: 1.2
url:	http://secunia.com/advisories/33178	Trust: 1.2
url:	http://secunia.com/advisories/33714	Trust: 1.2
url:	http://secunia.com/advisories/33786	Trust: 1.2
url:	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1	Trust: 1.2
url:	http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-622-1	Trust: 1.2
url:	http://www.ubuntu.com/usn/usn-627-1	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2019/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2023/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2025/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2029/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2030/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2050/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2051/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2052/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2055/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2092/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2113/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2114/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2123/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2139/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2166/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2195/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2196/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2197/references	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2268	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2291	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2334	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2342	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2377	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2383	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2384	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2466	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2467	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2482	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2525	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2549	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2558	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2582	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2008/2584	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2009/0297	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2009/0311	Trust: 1.2
url:	http://www.vupen.com/english/advisories/2010/0622	Trust: 1.2
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/43637	Trust: 1.2
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/43334	Trust: 1.2
url:	https://nvd.nist.gov/vuln/detail/cve-2008-1447	Trust: 1.2
url:	http://marc.info/?l=bugtraq&m=121630706004256&w=2	Trust: 1.1
url:	http://www.ipcop.org/index.php?name=news&file=article&sid=40	Trust: 1.1
url:	http://support.nortel.com/go/main.jsp?cscat=bltndetail&id=762152	Trust: 1.1
url:	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680	Trust: 1.1
url:	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=121866517322103&w=2	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=123324863916385&w=2	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=141879471518471&w=2	Trust: 1.1
url:	http://www.isc.org/index.pl?/sw/bind/bind8-eol.php	Trust: 0.9
url:	http://www.trusteer.com/docs/bind8dns.html	Trust: 0.9
url:	http://secunia.com/advisories/26629/	Trust: 0.9
url:	http://csrc.nist.gov/publications/nistpubs/800-81/sp800-81.pdf	Trust: 0.8
url:	http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience	Trust: 0.8
url:	http://tools.ietf.org/html/rfc3833	Trust: 0.8
url:	http://tools.ietf.org/html/rfc2827	Trust: 0.8
url:	http://tools.ietf.org/html/rfc3704	Trust: 0.8
url:	http://tools.ietf.org/html/rfc3013	Trust: 0.8
url:	http://tools.ietf.org/html/rfc4033	Trust: 0.8
url:	http://tools.ietf.org/html/draft-ietf-tsvwg-port-randomization	Trust: 0.8
url:	http://cr.yp.to/djbdns/dns_random.html	Trust: 0.8
url:	http://cr.yp.to/djbdns/dns_transmit.html	Trust: 0.8
url:	http://cr.yp.to/djbdns/forgery.html	Trust: 0.8
url:	http://www.trusteer.com/microsoftdns	Trust: 0.8
url:	http://www.trusteer.com/bind9dns	Trust: 0.8
url:	http://www.trusteer.com/bind8dns	Trust: 0.8
url:	http://www.sans.org/reading_room/whitepapers/dns/1567.php	Trust: 0.8
url:	http://blogs.iss.net/archive/morednsnat.html	Trust: 0.8
url:	https://jvn.jp/cert/jvnvu800113/	Trust: 0.8
url:	http://www.cert.at/static/cert.at-0802-dns-patchanalysis.pdf	Trust: 0.8
url:	http://www.isc.org/sw/bind/bind-security.php	Trust: 0.8
url:	http://www.trusteer.com/docs/bind9dns.html	Trust: 0.8
url:	http://jvn.jp/cert/jvnvu%23252735/index.html	Trust: 0.8
url:	http://secunia.com/advisories/26195/	Trust: 0.8
url:	http://www.milw0rm.com/exploits/4266	Trust: 0.8
url:	http://docs.info.apple.com/article.html?artnum=307041	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-1447	Trust: 0.4
url:	http://h30046.www3.hp.com/driveralertprofile.php?regioncode=na&langcode=useng&jumpid=in_sc-gen__driveritrc&topiccode=itrc	Trust: 0.2
url:	http://h30046.www3.hp.com/subsignin.php	Trust: 0.2
url:	http://www.itrc.hp.com/service/cki/secbullarchive.do	Trust: 0.2
url:	http://bugs.gentoo.org.	Trust: 0.2
url:	http://creativecommons.org/licenses/by-sa/2.5	Trust: 0.2
url:	http://security.gentoo.org/	Trust: 0.2
url:	http://www.debian.org/security/faq	Trust: 0.2
url:	http://security.debian.org/	Trust: 0.2
url:	http://www.debian.org/security/	Trust: 0.2
url:	http://packages.debian.org/<pkg>	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2007-2926	Trust: 0.2
url:	https://h20564.www2.hp.com/portal/site/hpsc/public/kb/	Trust: 0.2
url:	https://h20564.www2.hp.com/portal/site/hpsc/public/kb/secbullarchive/	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2011-4313	Trust: 0.2
url:	http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2009-0025	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2006-4096	Trust: 0.2
url:	https://h20566.www2.hp.com/portal/site/hpsc/patch/home/	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2012-4244	Trust: 0.2
url:	http://support.nortel.com/go/main.jsp?cscat=bltndetail&id=762152	Trust: 0.1
url:	http://www.ipcop.org/index.php?name=news&file=article&sid=40	Trust: 0.1
url:	http://marc.info/?l=bugtraq&m=123324863916385&w=2	Trust: 0.1
url:	http://marc.info/?l=bugtraq&m=141879471518471&w=2	Trust: 0.1
url:	http://marc.info/?l=bugtraq&m=121866517322103&w=2	Trust: 0.1
url:	http://marc.info/?l=bugtraq&m=121630706004256&w=2	Trust: 0.1
url:	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239	Trust: 0.1
url:	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/331.html	Trust: 0.1
url:	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490123	Trust: 0.1
url:	https://usn.ubuntu.com/622-1/	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.exploit-db.com/exploits/6122/	Trust: 0.1
url:	http://secunia.com/secunia_security_advisories/	Trust: 0.1
url:	https://psi.secunia.com/	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/927905	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/product/76/	Trust: 0.1
url:	http://secunia.com/about_secunia_advisories/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-4194	Trust: 0.1
url:	http://security.gentoo.org/glsa/glsa-200901-03.xml	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4194	Trust: 0.1
url:	http://security.freebsd.org/patches/sa-08:06/bind7.patch.asc	Trust: 0.1
url:	http://security.freebsd.org/patches/sa-08:06/bind63.patch	Trust: 0.1
url:	http://security.freebsd.org/>.	Trust: 0.1
url:	http://security.freebsd.org/patches/sa-08:06/bind63.patch.asc	Trust: 0.1
url:	http://security.freebsd.org/patches/sa-08:06/bind7.patch	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3.diff.gz	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3.dsc	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4.orig.tar.gz	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/dnsutils_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_mips.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-host_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/liblwres9_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_ia64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_s390.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_sparc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccc0_9.3.4-2etch3_powerpc.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind9-0_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/lwresd_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_amd64.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_arm.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_alpha.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libdns22_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_i386.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libbind-dev_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/bind9-doc_9.3.4-2etch3_all.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisccfg1_9.3.4-2etch3_mipsel.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/b/bind9/libisc11_9.3.4-2etch3_hppa.deb	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/src/bind-9.4.2-39.2.src.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-chrootenv-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-chrootenv-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://secunia.com/	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://support.novell.com/techcenter/psdb/aa846ea840c9bf29e6974f3b6913e550.html	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-utils-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/bind-9.4.1.p1-12.5.src.rpm	Trust: 0.1
url:	http://lists.grok.org.uk/full-disclosure-charter.html	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-devel-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-devel-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-doc-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-doc-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/bind-libs-32bit-9.4.2-39.2.x86_64.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-utils-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/bind-libs-32bit-9.4.1.p1-12.5.x86_64.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://support.novell.com/techcenter/psdb/555065b7278085ce1ce7a6e84b6f07aa.html	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/bind-libs-9.4.2-39.2.i586.rpm	Trust: 0.1
url:	http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/bind-libs-9.4.1.p1-12.5.i586.rpm	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/refpolicy_0.0.20061018-5.1+etch1.dsc	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/selinux-policy-refpolicy-src_0.0.20061018-5.1+etch1_all.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/selinux-policy-refpolicy-targeted_0.0.20061018-5.1+etch1_all.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/refpolicy_0.0.20061018-5.1+etch1.diff.gz	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/selinux-policy-refpolicy-strict_0.0.20061018-5.1+etch1_all.deb	Trust: 0.1
url:	http://wiki.debian.org/selinux/issues/bindportrandomization	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/refpolicy_0.0.20061018.orig.tar.gz	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/selinux-policy-refpolicy-dev_0.0.20061018-5.1+etch1_all.deb	Trust: 0.1
url:	http://security.debian.org/pool/updates/main/r/refpolicy/selinux-policy-refpolicy-doc_0.0.20061018-5.1+etch1_all.deb	Trust: 0.1
url:	http://kb.vmware.com/kb/1006356	Trust: 0.1
url:	http://kb.vmware.com/kb/1005896	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-5503	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3698	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-1807	Trust: 0.1
url:	http://kb.vmware.com/kb/1055	Trust: 0.1
url:	http://download3.vmware.com/software/esx/esx350-200806203-ug.zip	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-5438	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3696	Trust: 0.1
url:	http://kb.vmware.com/kb/1004824	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005117.tgz	Trust: 0.1
url:	http://www.vmware.com/support/server/doc/releasenotes_server.html	Trust: 0.1
url:	http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1004824.tgz	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3696	Trust: 0.1
url:	http://www.vmware.com/support/policies/eos_vi.html	Trust: 0.1
url:	http://kb.vmware.com/kb/1005111	Trust: 0.1
url:	http://kb.vmware.com/kb/1004823	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005108.tgz	Trust: 0.1
url:	http://kb.vmware.com/kb/1005113	Trust: 0.1
url:	http://www.vmware.com/download/player/	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3697	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3698	Trust: 0.1
url:	http://www.vmware.com/security	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-5269	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-1808	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx303-200808406-sg.zip	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005114.tgz	Trust: 0.1
url:	http://www.vmware.com/download/ws/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3691	Trust: 0.1
url:	http://www.vmware.com/support/policies/eos.html	Trust: 0.1
url:	http://kb.vmware.com/kb/1005114	Trust: 0.1
url:	http://www.vmware.com/download/server/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3693	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx303-200808403-sg.zip	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-1807	Trust: 0.1
url:	http://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-1806	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3694	Trust: 0.1
url:	http://kb.vmware.com/kb/1005112	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3695	Trust: 0.1
url:	http://www.vmware.com/support/player/doc/releasenotes_player.html	Trust: 0.1
url:	http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	Trust: 0.1
url:	http://www.vmware.com/download/ws/ws5.html	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3692	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3697	Trust: 0.1
url:	http://kb.vmware.com/kb/1005109	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3695	Trust: 0.1
url:	http://kb.vmware.com/kb/1005108	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-1808	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx303-200808404-sg.zip	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-2101	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-1806	Trust: 0.1
url:	http://kb.vmware.com/kb/1006357	Trust: 0.1
url:	http://www.vmware.com/support/policies/security_response.html	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005113.tgz	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-2101	Trust: 0.1
url:	http://kb.vmware.com/kb/1006034	Trust: 0.1
url:	http://kb.vmware.com/kb/1006035	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1006356.tgz	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2007-5503	Trust: 0.1
url:	http://kb.vmware.com/kb/1005117	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3693	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005112.tgz	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2007-5269	Trust: 0.1
url:	http://www.vmware.com/download/ace/	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005109.tgz	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3694	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1004823.tgz	Trust: 0.1
url:	http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	Trust: 0.1
url:	http://download3.vmware.com/software/vi/esx-1005111.tgz	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-3691	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2007-5438	Trust: 0.1
url:	http://www.vmware.com/support/player2/doc/releasenotes_player2.html	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2008-3692	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/800113>	Trust: 0.1
url:	http://tools.ietf.org/html/rfc3704>	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/252735>	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/927905>	Trust: 0.1
url:	http://tools.ietf.org/html/rfc2827>	Trust: 0.1
url:	http://tools.ietf.org/html/rfc3013>	Trust: 0.1
url:	http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience>	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/484649>	Trust: 0.1
url:	http://www.isc.org/sw/bind/bind-security.php>	Trust: 0.1
url:	http://www.us-cert.gov/cas/techalerts/ta08-190b.html>	Trust: 0.1
url:	http://tools.ietf.org/html/rfc3833>	Trust: 0.1
url:	http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx>	Trust: 0.1
url:	http://www.us-cert.gov/cas/signup.html>.	Trust: 0.1
url:	http://www.us-cert.gov/legal.html>	Trust: 0.1
url:	http://www.kb.cert.org/vuls/id/457875>	Trust: 0.1
url:	http://software.hp.com	Trust: 0.1
url:	https://www.hp.com/go/swa	Trust: 0.1
url:	http://itrc.hp.com	Trust: 0.1

CREDITS

Trust: 0.3

sources: PACKETSTORM: 130183 // PACKETSTORM: 129616 // PACKETSTORM: 96747

SOURCES

db:	CERT/CC	id:	VU#800113
db:	CERT/CC	id:	VU#927905
db:	CERT/CC	id:	VU#252735
db:	VULHUB	id:	VHN-31572
db:	VULMON	id:	CVE-2008-1447
db:	PACKETSTORM	id:	74443
db:	PACKETSTORM	id:	58910
db:	PACKETSTORM	id:	68129
db:	PACKETSTORM	id:	73732
db:	PACKETSTORM	id:	68183
db:	PACKETSTORM	id:	68036
db:	PACKETSTORM	id:	68118
db:	PACKETSTORM	id:	68502
db:	PACKETSTORM	id:	130183
db:	PACKETSTORM	id:	69536
db:	PACKETSTORM	id:	129616
db:	PACKETSTORM	id:	68061
db:	PACKETSTORM	id:	96747
db:	NVD	id:	CVE-2008-1447

LAST UPDATE DATE

2026-08-13T21:15:46.968000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#800113	date:	2014-04-14T00:00:00
db:	CERT/CC	id:	VU#927905	date:	2007-08-28T00:00:00
db:	CERT/CC	id:	VU#252735	date:	2008-08-06T00:00:00
db:	VULHUB	id:	VHN-31572	date:	2020-03-24T00:00:00
db:	VULMON	id:	CVE-2008-1447	date:	2020-03-24T00:00:00
db:	NVD	id:	CVE-2008-1447	date:	2026-06-16T22:51:45.080

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#800113	date:	2008-07-08T00:00:00
db:	CERT/CC	id:	VU#927905	date:	2007-08-28T00:00:00
db:	CERT/CC	id:	VU#252735	date:	2007-07-27T00:00:00
db:	VULHUB	id:	VHN-31572	date:	2008-07-08T00:00:00
db:	VULMON	id:	CVE-2008-1447	date:	2008-07-08T00:00:00
db:	PACKETSTORM	id:	74443	date:	2009-01-29T21:47:08
db:	PACKETSTORM	id:	58910	date:	2007-08-29T04:20:48
db:	PACKETSTORM	id:	68129	date:	2008-07-11T22:09:49
db:	PACKETSTORM	id:	73732	date:	2009-01-12T19:16:04
db:	PACKETSTORM	id:	68183	date:	2008-07-15T02:48:11
db:	PACKETSTORM	id:	68036	date:	2008-07-10T06:16:23
db:	PACKETSTORM	id:	68118	date:	2008-07-11T22:04:56
db:	PACKETSTORM	id:	68502	date:	2008-07-25T18:20:30
db:	PACKETSTORM	id:	130183	date:	2015-01-30T22:37:09
db:	PACKETSTORM	id:	69536	date:	2008-08-31T23:44:00
db:	PACKETSTORM	id:	129616	date:	2014-12-17T18:27:29
db:	PACKETSTORM	id:	68061	date:	2008-07-10T07:07:50
db:	PACKETSTORM	id:	96747	date:	2010-12-16T23:46:15
db:	NVD	id:	CVE-2008-1447	date:	2008-07-08T23:41:00