The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

s700_800 11.11 Bind 8.1.2 Patch : 

A potential vulnerability has been identified with HP-UX running BIND 8. The vulnerability could be exploited remotely to cause DNS cache poisoning.

SunOS 5.9_x86: in.dhcpd libresolv and BIND.
Date this patch was last updated by Sun : Jul/21/11

SunOS 5.9: in.dhcpd libresolv and BIND9 pa.
Date this patch was last updated by Sun : Jul/21/11

The remote host is running a version of BIND DNS Server prior to 8.4.7-P1.  This version of BIND is vulnerable to a flaw that would allow cache poisoning.  An attacker exploiting this flaw would need to be able to manipulate the vulnerable DNS server into contacting a malicious DNS server.  Successful exploitation would lead to a cache-poisoning attack. 

SunOS 5.8_x86: libresolv.so.2, in.named an.
Date this patch was last updated by Sun : Mar/09/09

SunOS 5.8: libresolv.so.2, in.named and BI.
Date this patch was last updated by Sun : Mar/09/09

ID	Name	Product	Family	Severity
29199	HP-UX PHNE_36185 : HP-UX Running BIND 8, Remote DNS Cache Poisoning (HPSBUX02289 SSRT071461 rev.1)	Nessus	HP-UX Local Security Checks	medium
27094	Solaris 9 (x86) : 114265-23	Nessus	Solaris Local Security Checks	medium
26165	Solaris 9 (sparc) : 112837-24	Nessus	Solaris Local Security Checks	medium
4195	ISC BIND < 8.4.7-P1 Outgoing Query Predictable DNS Query ID (deprecated)	Nessus Network Monitor	DNS Servers	medium
13429	Solaris 8 (x86) : 109327-24	Nessus	Solaris Local Security Checks	critical
13321	Solaris 8 (sparc) : 109326-24	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2007-2930

high

Tenable Plugins

medium

medium

medium

medium

critical

critical