CVE-2007-3377: Medium severity Nlnet Labs Net Dns vulnerability

Published Jun 25, 2007
·
Updated

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.

Affected Software

64 affected components
Nlnet Labs Net Dns=0.14
Nlnet Labs Net Dns=0.20
Nlnet Labs Net Dns=0.21
Nlnet Labs Net Dns=0.22
Nlnet Labs Net Dns=0.23
Nlnet Labs Net Dns=0.24
Nlnet Labs Net Dns=0.25
Nlnet Labs Net Dns=0.26
Nlnet Labs Net Dns=0.27
Nlnet Labs Net Dns=0.28
Nlnet Labs Net Dns=0.29
Nlnet Labs Net Dns=0.30
Nlnet Labs Net Dns=0.31
Nlnet Labs Net Dns=0.32
Nlnet Labs Net Dns=0.33
Nlnet Labs Net Dns=0.34
Nlnet Labs Net Dns=0.34_02
Nlnet Labs Net Dns=0.34_03
Nlnet Labs Net Dns=0.35
Nlnet Labs Net Dns=0.36
Nlnet Labs Net Dns=0.37
Nlnet Labs Net Dns=0.38
Nlnet Labs Net Dns=0.38_01
Nlnet Labs Net Dns=0.38_02
Nlnet Labs Net Dns=0.39
Nlnet Labs Net Dns=0.39_01
Nlnet Labs Net Dns=0.39_02
Nlnet Labs Net Dns=0.40
Nlnet Labs Net Dns=0.40_01
Nlnet Labs Net Dns=0.41
Nlnet Labs Net Dns=0.42
Nlnet Labs Net Dns=0.42_01
Nlnet Labs Net Dns=0.42_02
Nlnet Labs Net Dns=0.43
Nlnet Labs Net Dns=0.44
Nlnet Labs Net Dns=0.44_01
Nlnet Labs Net Dns=0.44_02
Nlnet Labs Net Dns=0.45
Nlnet Labs Net Dns=0.45_01
Nlnet Labs Net Dns=0.46
Nlnet Labs Net Dns=0.47
Nlnet Labs Net Dns=0.47_01
Nlnet Labs Net Dns=0.48
Nlnet Labs Net Dns=0.48_01
Nlnet Labs Net Dns=0.48_02
Nlnet Labs Net Dns=0.48_03
Nlnet Labs Net Dns=0.49
Nlnet Labs Net Dns=0.49_01
Nlnet Labs Net Dns=0.49_02
Nlnet Labs Net Dns=0.49_03
Nlnet Labs Net Dns=0.50
Nlnet Labs Net Dns=0.51
Nlnet Labs Net Dns=0.51_01
Nlnet Labs Net Dns=0.51_02
Nlnet Labs Net Dns=0.52
Nlnet Labs Net Dns=0.53
Nlnet Labs Net Dns=0.53_01
Nlnet Labs Net Dns=0.53_02
Nlnet Labs Net Dns=0.54
Nlnet Labs Net Dns=0.55
Nlnet Labs Net Dns=0.56
Nlnet Labs Net Dns=0.57
Nlnet Labs Net Dns=0.58
Nlnet Labs Net Dns=0.59

Event History

Jun 25, 2007
CVE Published
09:30 PM
Jun 26, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-3377?

CVE-2007-3377 is classified as a medium severity vulnerability due to its potential to allow remote DNS response spoofing.

2

How do I fix CVE-2007-3377?

To fix CVE-2007-3377, upgrade to a version of Net::DNS that is 0.60 or later to eliminate the predictable sequence ID issue.

3

What versions of Net::DNS are affected by CVE-2007-3377?

CVE-2007-3377 affects multiple versions of Net::DNS prior to 0.60, including 0.48_03, 0.46, and others listed in the advisory.

4

Can CVE-2007-3377 be exploited remotely?

Yes, CVE-2007-3377 can be exploited remotely, allowing attackers to spoof DNS responses by leveraging the predictable sequence IDs.

5

Is there a known workaround for CVE-2007-3377 if I cannot update?

There are no effective workarounds for CVE-2007-3377, and the recommended solution is to upgrade to a patched version.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203