medium
4.3
CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2007-3377

First published: Mon Jun 25 2007(Updated: )

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
NLnet Labs NetDNS=0.14
NLnet Labs NetDNS=0.20
NLnet Labs NetDNS=0.21
NLnet Labs NetDNS=0.22
NLnet Labs NetDNS=0.23
NLnet Labs NetDNS=0.24
NLnet Labs NetDNS=0.25
NLnet Labs NetDNS=0.26
NLnet Labs NetDNS=0.27
NLnet Labs NetDNS=0.28
NLnet Labs NetDNS=0.29
NLnet Labs NetDNS=0.30
NLnet Labs NetDNS=0.31
NLnet Labs NetDNS=0.32
NLnet Labs NetDNS=0.33
NLnet Labs NetDNS=0.34
NLnet Labs NetDNS=0.34_02
NLnet Labs NetDNS=0.34_03
NLnet Labs NetDNS=0.35
NLnet Labs NetDNS=0.36
NLnet Labs NetDNS=0.37
NLnet Labs NetDNS=0.38
NLnet Labs NetDNS=0.38_01
NLnet Labs NetDNS=0.38_02
NLnet Labs NetDNS=0.39
NLnet Labs NetDNS=0.39_01
NLnet Labs NetDNS=0.39_02
NLnet Labs NetDNS=0.40
NLnet Labs NetDNS=0.40_01
NLnet Labs NetDNS=0.41
NLnet Labs NetDNS=0.42
NLnet Labs NetDNS=0.42_01
NLnet Labs NetDNS=0.42_02
NLnet Labs NetDNS=0.43
NLnet Labs NetDNS=0.44
NLnet Labs NetDNS=0.44_01
NLnet Labs NetDNS=0.44_02
NLnet Labs NetDNS=0.45
NLnet Labs NetDNS=0.45_01
NLnet Labs NetDNS=0.46
NLnet Labs NetDNS=0.47
NLnet Labs NetDNS=0.47_01
NLnet Labs NetDNS=0.48
NLnet Labs NetDNS=0.48_01
NLnet Labs NetDNS=0.48_02
NLnet Labs NetDNS=0.48_03
NLnet Labs NetDNS=0.49
NLnet Labs NetDNS=0.49_01
NLnet Labs NetDNS=0.49_02
NLnet Labs NetDNS=0.49_03
NLnet Labs NetDNS=0.50
NLnet Labs NetDNS=0.51
NLnet Labs NetDNS=0.51_01
NLnet Labs NetDNS=0.51_02
NLnet Labs NetDNS=0.52
NLnet Labs NetDNS=0.53
NLnet Labs NetDNS=0.53_01
NLnet Labs NetDNS=0.53_02
NLnet Labs NetDNS=0.54
NLnet Labs NetDNS=0.55
NLnet Labs NetDNS=0.56
NLnet Labs NetDNS=0.57
NLnet Labs NetDNS=0.58
NLnet Labs NetDNS=0.59

Remedy

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-3377?

    CVE-2007-3377 is classified as a medium severity vulnerability due to its potential to allow remote DNS response spoofing.

  • How do I fix CVE-2007-3377?

    To fix CVE-2007-3377, upgrade to a version of Net::DNS that is 0.60 or later to eliminate the predictable sequence ID issue.

  • What versions of Net::DNS are affected by CVE-2007-3377?

    CVE-2007-3377 affects multiple versions of Net::DNS prior to 0.60, including 0.48_03, 0.46, and others listed in the advisory.

  • Can CVE-2007-3377 be exploited remotely?

    Yes, CVE-2007-3377 can be exploited remotely, allowing attackers to spoof DNS responses by leveraging the predictable sequence IDs.

  • Is there a known workaround for CVE-2007-3377 if I cannot update?

    There are no effective workarounds for CVE-2007-3377, and the recommended solution is to upgrade to a patched version.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203