bind weak pseudo-random numbers generator updated since 24.07.2007
Published:		28.08.2007
Source:		BUGTRAQ
SecurityVulns ID:		7967
Type:		remote
Level:		7/10
Description:		Weak PRNG creates predictable DNS request IDs and makes high success probability of DNS cache poisoning attack.

Affected:		ISC : bind 9.2
		BIND : bind 9.3
		ISC : bind 9.4

Original document		Amit Klein, BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer) (28.08.2007)
		SECURITEAM, [EXPL] DNS Cache Poison (BIND 9) (07.08.2007)
		Amit Klein, "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer) (24.07.2007)

Files:		bind DNS Cache Poison v0.3beta
Discuss:		Read or add your comments to this news (0 comments)