Vulnerability Report

CVE-2008-1447

Title: Isc Bind

Other

Proof Of Concept

PoC Available for CVE-2008-1447

CWE Category CWE-331
Published Date Jul 08, 2008
Modified Date Jun 16, 2026
Exploit Status Available
Score 6.8 CVSS v3.1
Exploit Probability (EPSS)
95.18%

Vulnerability Summary

CVE-2008-1447: The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."

Impacted Vendors

Reference Links

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://marc.info/?l=bugtraq&m=121630706004256&w=2 http://marc.info/?l=bugtraq&m=121866517322103&w=2 http://marc.info/?l=bugtraq&m=123324863916385&w=2 http://marc.info/?l=bugtraq&m=141879471518471&w=2 http://rhn.redhat.com/errata/RHSA-2008-0533.html http://secunia.com/advisories/30925 http://secunia.com/advisories/30973 http://secunia.com/advisories/30977 http://secunia.com/advisories/30979 http://secunia.com/advisories/30980 http://secunia.com/advisories/30988 http://secunia.com/advisories/30989 http://secunia.com/advisories/30998 http://secunia.com/advisories/31011 http://secunia.com/advisories/31012 http://secunia.com/advisories/31014 http://secunia.com/advisories/31019 http://secunia.com/advisories/31022 http://secunia.com/advisories/31030 http://secunia.com/advisories/31031 http://secunia.com/advisories/31033 http://secunia.com/advisories/31052 http://secunia.com/advisories/31065 http://secunia.com/advisories/31072 http://secunia.com/advisories/31093 http://secunia.com/advisories/31094 http://secunia.com/advisories/31137 http://secunia.com/advisories/31143 http://secunia.com/advisories/31151 http://secunia.com/advisories/31152 http://secunia.com/advisories/31153 http://secunia.com/advisories/31169 http://secunia.com/advisories/31197 http://secunia.com/advisories/31199 http://secunia.com/advisories/31204 http://secunia.com/advisories/31207 http://secunia.com/advisories/31209 http://secunia.com/advisories/31212 http://secunia.com/advisories/31213 http://secunia.com/advisories/31221 http://secunia.com/advisories/31236 http://secunia.com/advisories/31237 http://secunia.com/advisories/31254 http://secunia.com/advisories/31326 http://secunia.com/advisories/31354 http://secunia.com/advisories/31422 http://secunia.com/advisories/31430 http://secunia.com/advisories/31451 http://secunia.com/advisories/31482 http://secunia.com/advisories/31495 http://secunia.com/advisories/31588 http://secunia.com/advisories/31687 http://secunia.com/advisories/31823 http://secunia.com/advisories/31882 http://secunia.com/advisories/31900 http://secunia.com/advisories/33178 http://secunia.com/advisories/33714 http://secunia.com/advisories/33786 http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc http://security.gentoo.org/glsa/glsa-200807-08.xml http://security.gentoo.org/glsa/glsa-200812-17.xml http://security.gentoo.org/glsa/glsa-201209-25.xml http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1 http://support.apple.com/kb/HT3026 http://support.apple.com/kb/HT3129 http://support.citrix.com/article/CTX117991 http://support.citrix.com/article/CTX118183 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152 http://up2date.astaro.com/2008/08/up2date_7202_released.html http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning http://www.caughq.org/exploits/CAU-EX-2008-0002.txt http://www.caughq.org/exploits/CAU-EX-2008-0003.txt http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml http://www.debian.org/security/2008/dsa-1603 http://www.debian.org/security/2008/dsa-1604 http://www.debian.org/security/2008/dsa-1605 http://www.debian.org/security/2008/dsa-1619 http://www.debian.org/security/2008/dsa-1623 http://www.doxpara.com/?p=1176 http://www.doxpara.com/DMK_BO2K8.ppt http://www.ibm.com/support/docview.wss?uid=isg1IZ26667 http://www.ibm.com/support/docview.wss?uid=isg1IZ26668 http://www.ibm.com/support/docview.wss?uid=isg1IZ26669 http://www.ibm.com/support/docview.wss?uid=isg1IZ26670 http://www.ibm.com/support/docview.wss?uid=isg1IZ26671 http://www.ibm.com/support/docview.wss?uid=isg1IZ26672 http://www.ipcop.org/index.php?name=News&file=article&sid=40 http://www.isc.org/index.pl?/sw/bind/bind-security.php http://www.kb.cert.org/vuls/id/800113 http://www.kb.cert.org/vuls/id/MIMG-7DWR4J http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q http://www.mandriva.com/security/advisories?name=MDVSA-2008:139 http://www.nominum.com/asset_upload_file741_2661.pdf http://www.novell.com/support/viewContent.do?externalId=7000912 http://www.openbsd.org/errata42.html#013_bind http://www.openbsd.org/errata43.html#004_bind http://www.phys.uu.nl/~rombouts/pdnsd.html http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog http://www.redhat.com/support/errata/RHSA-2008-0789.html http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ http://www.securityfocus.com/archive/1/495289/100/0/threaded http://www.securityfocus.com/archive/1/495869/100/0/threaded http://www.securityfocus.com/bid/30131 http://www.securitytracker.com/id?1020437 http://www.securitytracker.com/id?1020438 http://www.securitytracker.com/id?1020440 http://www.securitytracker.com/id?1020448 http://www.securitytracker.com/id?1020449 http://www.securitytracker.com/id?1020548 http://www.securitytracker.com/id?1020558 http://www.securitytracker.com/id?1020560 http://www.securitytracker.com/id?1020561 http://www.securitytracker.com/id?1020575 http://www.securitytracker.com/id?1020576 http://www.securitytracker.com/id?1020577 http://www.securitytracker.com/id?1020578 http://www.securitytracker.com/id?1020579 http://www.securitytracker.com/id?1020651 http://www.securitytracker.com/id?1020653 http://www.securitytracker.com/id?1020702 http://www.securitytracker.com/id?1020802 http://www.securitytracker.com/id?1020804 http://www.ubuntu.com/usn/usn-622-1 http://www.ubuntu.com/usn/usn-627-1 http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html http://www.us-cert.gov/cas/techalerts/TA08-190A.html http://www.us-cert.gov/cas/techalerts/TA08-190B.html http://www.us-cert.gov/cas/techalerts/TA08-260A.html http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://www.vupen.com/english/advisories/2008/2019/references http://www.vupen.com/english/advisories/2008/2023/references http://www.vupen.com/english/advisories/2008/2025/references http://www.vupen.com/english/advisories/2008/2029/references http://www.vupen.com/english/advisories/2008/2030/references http://www.vupen.com/english/advisories/2008/2050/references http://www.vupen.com/english/advisories/2008/2051/references http://www.vupen.com/english/advisories/2008/2052/references http://www.vupen.com/english/advisories/2008/2055/references http://www.vupen.com/english/advisories/2008/2092/references http://www.vupen.com/english/advisories/2008/2113/references http://www.vupen.com/english/advisories/2008/2114/references http://www.vupen.com/english/advisories/2008/2123/references http://www.vupen.com/english/advisories/2008/2139/references http://www.vupen.com/english/advisories/2008/2166/references http://www.vupen.com/english/advisories/2008/2195/references http://www.vupen.com/english/advisories/2008/2196/references http://www.vupen.com/english/advisories/2008/2197/references http://www.vupen.com/english/advisories/2008/2268 http://www.vupen.com/english/advisories/2008/2291 http://www.vupen.com/english/advisories/2008/2334 http://www.vupen.com/english/advisories/2008/2342 http://www.vupen.com/english/advisories/2008/2377 http://www.vupen.com/english/advisories/2008/2383 http://www.vupen.com/english/advisories/2008/2384 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/2467 http://www.vupen.com/english/advisories/2008/2482 http://www.vupen.com/english/advisories/2008/2525 http://www.vupen.com/english/advisories/2008/2549 http://www.vupen.com/english/advisories/2008/2558 http://www.vupen.com/english/advisories/2008/2582 http://www.vupen.com/english/advisories/2008/2584 http://www.vupen.com/english/advisories/2009/0297 http://www.vupen.com/english/advisories/2009/0311 http://www.vupen.com/english/advisories/2010/0622 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037 https://exchange.xforce.ibmcloud.com/vulnerabilities/43334 https://exchange.xforce.ibmcloud.com/vulnerabilities/43637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627 https://www.exploit-db.com/exploits/6122 https://www.exploit-db.com/exploits/6123 https://www.exploit-db.com/exploits/6130 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://marc.info/?l=bugtraq&m=121630706004256&w=2 http://marc.info/?l=bugtraq&m=121866517322103&w=2 http://marc.info/?l=bugtraq&m=123324863916385&w=2 http://marc.info/?l=bugtraq&m=141879471518471&w=2 http://rhn.redhat.com/errata/RHSA-2008-0533.html http://secunia.com/advisories/30925 http://secunia.com/advisories/30973 http://secunia.com/advisories/30977 http://secunia.com/advisories/30979 http://secunia.com/advisories/30980 http://secunia.com/advisories/30988 http://secunia.com/advisories/30989 http://secunia.com/advisories/30998 http://secunia.com/advisories/31011 http://secunia.com/advisories/31012 http://secunia.com/advisories/31014 http://secunia.com/advisories/31019 http://secunia.com/advisories/31022 http://secunia.com/advisories/31030 http://secunia.com/advisories/31031 http://secunia.com/advisories/31033 http://secunia.com/advisories/31052 http://secunia.com/advisories/31065 http://secunia.com/advisories/31072 http://secunia.com/advisories/31093 http://secunia.com/advisories/31094 http://secunia.com/advisories/31137 http://secunia.com/advisories/31143 http://secunia.com/advisories/31151 http://secunia.com/advisories/31152 http://secunia.com/advisories/31153 http://secunia.com/advisories/31169 http://secunia.com/advisories/31197 http://secunia.com/advisories/31199 http://secunia.com/advisories/31204 http://secunia.com/advisories/31207 http://secunia.com/advisories/31209 http://secunia.com/advisories/31212 http://secunia.com/advisories/31213 http://secunia.com/advisories/31221 http://secunia.com/advisories/31236 http://secunia.com/advisories/31237 http://secunia.com/advisories/31254 http://secunia.com/advisories/31326 http://secunia.com/advisories/31354 http://secunia.com/advisories/31422 http://secunia.com/advisories/31430 http://secunia.com/advisories/31451 http://secunia.com/advisories/31482 http://secunia.com/advisories/31495 http://secunia.com/advisories/31588 http://secunia.com/advisories/31687 http://secunia.com/advisories/31823 http://secunia.com/advisories/31882 http://secunia.com/advisories/31900 http://secunia.com/advisories/33178 http://secunia.com/advisories/33714 http://secunia.com/advisories/33786 http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc http://security.gentoo.org/glsa/glsa-200807-08.xml http://security.gentoo.org/glsa/glsa-200812-17.xml http://security.gentoo.org/glsa/glsa-201209-25.xml http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1 http://support.apple.com/kb/HT3026 http://support.apple.com/kb/HT3129 http://support.citrix.com/article/CTX117991 http://support.citrix.com/article/CTX118183 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152 http://up2date.astaro.com/2008/08/up2date_7202_released.html http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning http://www.caughq.org/exploits/CAU-EX-2008-0002.txt http://www.caughq.org/exploits/CAU-EX-2008-0003.txt http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml http://www.debian.org/security/2008/dsa-1603 http://www.debian.org/security/2008/dsa-1604 http://www.debian.org/security/2008/dsa-1605 http://www.debian.org/security/2008/dsa-1619 http://www.debian.org/security/2008/dsa-1623 http://www.doxpara.com/?p=1176 http://www.doxpara.com/DMK_BO2K8.ppt http://www.ibm.com/support/docview.wss?uid=isg1IZ26667 http://www.ibm.com/support/docview.wss?uid=isg1IZ26668 http://www.ibm.com/support/docview.wss?uid=isg1IZ26669 http://www.ibm.com/support/docview.wss?uid=isg1IZ26670 http://www.ibm.com/support/docview.wss?uid=isg1IZ26671 http://www.ibm.com/support/docview.wss?uid=isg1IZ26672 http://www.ipcop.org/index.php?name=News&file=article&sid=40 http://www.isc.org/index.pl?/sw/bind/bind-security.php http://www.kb.cert.org/vuls/id/800113 http://www.kb.cert.org/vuls/id/MIMG-7DWR4J http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q http://www.mandriva.com/security/advisories?name=MDVSA-2008:139 http://www.nominum.com/asset_upload_file741_2661.pdf http://www.novell.com/support/viewContent.do?externalId=7000912 http://www.openbsd.org/errata42.html#013_bind http://www.openbsd.org/errata43.html#004_bind http://www.phys.uu.nl/~rombouts/pdnsd.html http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog http://www.redhat.com/support/errata/RHSA-2008-0789.html http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ http://www.securityfocus.com/archive/1/495289/100/0/threaded http://www.securityfocus.com/archive/1/495869/100/0/threaded http://www.securityfocus.com/bid/30131 http://www.securitytracker.com/id?1020437 http://www.securitytracker.com/id?1020438 http://www.securitytracker.com/id?1020440 http://www.securitytracker.com/id?1020448 http://www.securitytracker.com/id?1020449 http://www.securitytracker.com/id?1020548 http://www.securitytracker.com/id?1020558 http://www.securitytracker.com/id?1020560 http://www.securitytracker.com/id?1020561 http://www.securitytracker.com/id?1020575 http://www.securitytracker.com/id?1020576 http://www.securitytracker.com/id?1020577 http://www.securitytracker.com/id?1020578 http://www.securitytracker.com/id?1020579 http://www.securitytracker.com/id?1020651 http://www.securitytracker.com/id?1020653 http://www.securitytracker.com/id?1020702 http://www.securitytracker.com/id?1020802 http://www.securitytracker.com/id?1020804 http://www.ubuntu.com/usn/usn-622-1 http://www.ubuntu.com/usn/usn-627-1 http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html http://www.us-cert.gov/cas/techalerts/TA08-190A.html http://www.us-cert.gov/cas/techalerts/TA08-190B.html http://www.us-cert.gov/cas/techalerts/TA08-260A.html http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://www.vupen.com/english/advisories/2008/2019/references http://www.vupen.com/english/advisories/2008/2023/references http://www.vupen.com/english/advisories/2008/2025/references http://www.vupen.com/english/advisories/2008/2029/references http://www.vupen.com/english/advisories/2008/2030/references http://www.vupen.com/english/advisories/2008/2050/references http://www.vupen.com/english/advisories/2008/2051/references http://www.vupen.com/english/advisories/2008/2052/references http://www.vupen.com/english/advisories/2008/2055/references http://www.vupen.com/english/advisories/2008/2092/references http://www.vupen.com/english/advisories/2008/2113/references http://www.vupen.com/english/advisories/2008/2114/references http://www.vupen.com/english/advisories/2008/2123/references http://www.vupen.com/english/advisories/2008/2139/references http://www.vupen.com/english/advisories/2008/2166/references http://www.vupen.com/english/advisories/2008/2195/references http://www.vupen.com/english/advisories/2008/2196/references http://www.vupen.com/english/advisories/2008/2197/references http://www.vupen.com/english/advisories/2008/2268 http://www.vupen.com/english/advisories/2008/2291 http://www.vupen.com/english/advisories/2008/2334 http://www.vupen.com/english/advisories/2008/2342 http://www.vupen.com/english/advisories/2008/2377 http://www.vupen.com/english/advisories/2008/2383 http://www.vupen.com/english/advisories/2008/2384 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/2467 http://www.vupen.com/english/advisories/2008/2482 http://www.vupen.com/english/advisories/2008/2525 http://www.vupen.com/english/advisories/2008/2549 http://www.vupen.com/english/advisories/2008/2558 http://www.vupen.com/english/advisories/2008/2582 http://www.vupen.com/english/advisories/2008/2584 http://www.vupen.com/english/advisories/2009/0297 http://www.vupen.com/english/advisories/2009/0311 http://www.vupen.com/english/advisories/2010/0622 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037 https://exchange.xforce.ibmcloud.com/vulnerabilities/43334 https://exchange.xforce.ibmcloud.com/vulnerabilities/43637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627 https://www.exploit-db.com/exploits/6122 https://www.exploit-db.com/exploits/6123 https://www.exploit-db.com/exploits/6130 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html
CVSS v3.1
Source Entity [email protected]
Severity MEDIUM
6.8
Attack Vector
NETWORK
Complexity
HIGH
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
CHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:N/I:P/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-1447 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/6122
View Code
Exploit-DB https://www.exploit-db.com/exploits/6130
View Code
Exploit-DB https://www.exploit-db.com/exploits/6123
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK
Complexity HIGH
Privileges N/A
Interaction NONE
CVSS Vector String CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

Affected Stack

No specific products linked.