CVE-2008-1447: Medium severity ubuntu linux vulnerability
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2008-1447?
CVE-2008-1447 has been rated as critical due to its ability to allow remote attackers to spoof DNS traffic.
How do I fix CVE-2008-1447?
To fix CVE-2008-1447, update to a non-vulnerable version of BIND, such as 9.5.0-P1 or later.
What systems are affected by CVE-2008-1447?
CVE-2008-1447 affects various versions of BIND and Microsoft DNS, including specific versions of Windows 2000, XP, and Server 2003.
How can CVE-2008-1447 impact my network security?
CVE-2008-1447 can lead to DNS spoofing, potentially redirecting users to malicious sites.
Are there any workarounds for CVE-2008-1447?
A temporary workaround for CVE-2008-1447 is to restrict access to the DNS servers and monitor traffic for any unusual patterns.