Vulnerability Report

CVE-2007-2926

Title: Isc Bind

Other

Proof Of Concept

PoC Available for CVE-2007-2926

CWE Category NVD-CWE-noinfo

Published Date Jul 24, 2007

Modified Date Jun 16, 2026

Exploit Status Available

Score 4.3 CVSS v2.0

Exploit Probability (EPSS)

13.09%

Vulnerability Summary

CVE-2007-2926: ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Impacted Vendors

isc 1

Reference Links

ftp://aix.software.ibm.com/aix/efixes/security/README ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc http://docs.info.apple.com/article.html?artnum=307041 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368 http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html http://marc.info/?l=bugtraq&m=141879471518471&w=2 http://secunia.com/advisories/26148 http://secunia.com/advisories/26152 http://secunia.com/advisories/26160 http://secunia.com/advisories/26180 http://secunia.com/advisories/26195 http://secunia.com/advisories/26217 http://secunia.com/advisories/26227 http://secunia.com/advisories/26231 http://secunia.com/advisories/26236 http://secunia.com/advisories/26261 http://secunia.com/advisories/26308 http://secunia.com/advisories/26330 http://secunia.com/advisories/26509 http://secunia.com/advisories/26515 http://secunia.com/advisories/26531 http://secunia.com/advisories/26605 http://secunia.com/advisories/26607 http://secunia.com/advisories/26847 http://secunia.com/advisories/26925 http://secunia.com/advisories/27643 http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1 http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903 http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only http://www.debian.org/security/2007/dsa-1341 http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml http://www.isc.org/index.pl?/sw/bind/bind-security.php http://www.kb.cert.org/vuls/id/252735 http://www.mandriva.com/security/advisories?name=MDKSA-2007:149 http://www.novell.com/linux/security/advisories/2007_47_bind.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html http://www.redhat.com/support/errata/RHSA-2007-0740.html http://www.securiteam.com/securitynews/5VP0L0UM0A.html http://www.securityfocus.com/archive/1/474516/100/0/threaded http://www.securityfocus.com/archive/1/474545/100/0/threaded http://www.securityfocus.com/archive/1/474808/100/0/threaded http://www.securityfocus.com/archive/1/474856/100/0/threaded http://www.securityfocus.com/bid/25037 http://www.securityfocus.com/bid/26444 http://www.securitytracker.com/id?1018442 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 http://www.trusteer.com/docs/bind9dns.html http://www.trusteer.com/docs/bind9dns_s.html http://www.trustix.org/errata/2007/0023/ http://www.ubuntu.com/usn/usn-491-1 http://www.us-cert.gov/cas/techalerts/TA07-319A.html http://www.vupen.com/english/advisories/2007/2627 http://www.vupen.com/english/advisories/2007/2662 http://www.vupen.com/english/advisories/2007/2782 http://www.vupen.com/english/advisories/2007/2914 http://www.vupen.com/english/advisories/2007/2932 http://www.vupen.com/english/advisories/2007/3242 http://www.vupen.com/english/advisories/2007/3868 https://exchange.xforce.ibmcloud.com/vulnerabilities/35575 https://issues.rpath.com/browse/RPL-1587 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226 ftp://aix.software.ibm.com/aix/efixes/security/README ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc http://docs.info.apple.com/article.html?artnum=307041 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368 http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html http://marc.info/?l=bugtraq&m=141879471518471&w=2 http://secunia.com/advisories/26148 http://secunia.com/advisories/26152 http://secunia.com/advisories/26160 http://secunia.com/advisories/26180 http://secunia.com/advisories/26195 http://secunia.com/advisories/26217 http://secunia.com/advisories/26227 http://secunia.com/advisories/26231 http://secunia.com/advisories/26236 http://secunia.com/advisories/26261 http://secunia.com/advisories/26308 http://secunia.com/advisories/26330 http://secunia.com/advisories/26509 http://secunia.com/advisories/26515 http://secunia.com/advisories/26531 http://secunia.com/advisories/26605 http://secunia.com/advisories/26607 http://secunia.com/advisories/26847 http://secunia.com/advisories/26925 http://secunia.com/advisories/27643 http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1 http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903 http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only http://www.debian.org/security/2007/dsa-1341 http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml http://www.isc.org/index.pl?/sw/bind/bind-security.php http://www.kb.cert.org/vuls/id/252735 http://www.mandriva.com/security/advisories?name=MDKSA-2007:149 http://www.novell.com/linux/security/advisories/2007_47_bind.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html http://www.redhat.com/support/errata/RHSA-2007-0740.html http://www.securiteam.com/securitynews/5VP0L0UM0A.html http://www.securityfocus.com/archive/1/474516/100/0/threaded http://www.securityfocus.com/archive/1/474545/100/0/threaded http://www.securityfocus.com/archive/1/474808/100/0/threaded http://www.securityfocus.com/archive/1/474856/100/0/threaded http://www.securityfocus.com/bid/25037 http://www.securityfocus.com/bid/26444 http://www.securitytracker.com/id?1018442 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 http://www.trusteer.com/docs/bind9dns.html http://www.trusteer.com/docs/bind9dns_s.html http://www.trustix.org/errata/2007/0023/ http://www.ubuntu.com/usn/usn-491-1 http://www.us-cert.gov/cas/techalerts/TA07-319A.html http://www.vupen.com/english/advisories/2007/2627 http://www.vupen.com/english/advisories/2007/2662 http://www.vupen.com/english/advisories/2007/2782 http://www.vupen.com/english/advisories/2007/2914 http://www.vupen.com/english/advisories/2007/2932 http://www.vupen.com/english/advisories/2007/3242 http://www.vupen.com/english/advisories/2007/3868 https://exchange.xforce.ibmcloud.com/vulnerabilities/35575 https://issues.rpath.com/browse/RPL-1587 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.3

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:N/I:P/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-2926 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/4266

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

July 24, 2007 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected Stack

No specific products linked.