Vulnerability-Lookup

BDU:2015-02602 (CVE-2007-2926)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации

Summary

Множественные уязвимости пакета liblwres9 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению целостности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

4.3 (Medium) CVSS 2.0


                      
                        AV:N/AC:M/Au:N/C:N/I:P/A:N

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2007-2926, DSA-1341, ID:1400779

References

2 references

URL
http://www.debian.org/security/dsa-1341/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 4 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 4: ppc: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 s390x: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 i686: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 sparc: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 x86-64: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 ia64: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 alpha: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 noarch: bind9-doc - 9.3.4-2etch1 mipsel: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 hppa: bind9 - 9.3.4-2etch1 bind9-host - 9.3.4-2etch1 dnsutils - 9.3.4-2etch1 libbind-dev - 9.3.4-2etch1 libbind9-0 - 9.3.4-2etch1 libdns22 - 9.3.4-2etch1 libisc11 - 9.3.4-2etch1 libisccc0 - 9.3.4-2etch1 libisccfg1 - 9.3.4-2etch1 liblwres9 - 9.3.4-2etch1 lwresd - 9.3.4-2etch1 Debian GNU/Linux 3.1: s390x: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 m68k: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 i686: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 sparc: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 x86-64: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 ia64: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 alpha: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 noarch: bind9-doc - 9.2.4-1sarge3 mipsel: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3 arm: bind9 - 9.2.4-1sarge3 bind9-host - 9.2.4-1sarge3 dnsutils - 9.2.4-1sarge3 libbind-dev - 9.2.4-1sarge3 libdns16 - 9.2.4-1sarge3 libisc7 - 9.2.4-1sarge3 libisccc0 - 9.2.4-1sarge3 libisccfg0 - 9.2.4-1sarge3 liblwres1 - 9.2.4-1sarge3 lwresd - 9.2.4-1sarge3

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\ts390x:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\ti686:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\tsparc:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\tx86-64:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\tia64:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\talpha:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\tnoarch:\n\t\tbind9-doc - 9.3.4-2etch1\n\tmipsel:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\n\thppa:\n\t\tbind9 - 9.3.4-2etch1\n\t\tbind9-host - 9.3.4-2etch1\n\t\tdnsutils - 9.3.4-2etch1\n\t\tlibbind-dev - 9.3.4-2etch1\n\t\tlibbind9-0 - 9.3.4-2etch1\n\t\tlibdns22 - 9.3.4-2etch1\n\t\tlibisc11 - 9.3.4-2etch1\n\t\tlibisccc0 - 9.3.4-2etch1\n\t\tlibisccfg1 - 9.3.4-2etch1\n\t\tliblwres9 - 9.3.4-2etch1\n\t\tlwresd - 9.3.4-2etch1\nDebian GNU/Linux 3.1:\n\ts390x:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tm68k:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\ti686:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tsparc:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tx86-64:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tia64:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\talpha:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tnoarch:\n\t\tbind9-doc - 9.2.4-1sarge3\n\tmipsel:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3\n\tarm:\n\t\tbind9 - 9.2.4-1sarge3\n\t\tbind9-host - 9.2.4-1sarge3\n\t\tdnsutils - 9.2.4-1sarge3\n\t\tlibbind-dev - 9.2.4-1sarge3\n\t\tlibdns16 - 9.2.4-1sarge3\n\t\tlibisc7 - 9.2.4-1sarge3\n\t\tlibisccc0 - 9.2.4-1sarge3\n\t\tlibisccfg0 - 9.2.4-1sarge3\n\t\tliblwres1 - 9.2.4-1sarge3\n\t\tlwresd - 9.2.4-1sarge3",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02602",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2007-2926, DSA-1341, ID:1400779",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 liblwres9 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1341/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)"
}

CVE-2007-2926 (GCVE-0-2007-2926)

Vulnerability from cvelistv5 – Published: 2007-07-24 17:00 – Updated: 2024-08-07 13:57

Summary

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Severity

No CVSS data available.

CWE

Assigner

certcc mitre root

References

67 references

URL	Tags
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.trusteer.com/docs/bind9dns_s.html	x_refsource_MISC
http://secunia.com/advisories/26231	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2932	vdb-entryx_refsource_VUPEN
http://marc.info/?l=bugtraq&m=141879471518471&w=2	vendor-advisoryx_refsource_HP
http://secunia.com/advisories/26847	third-party-advisoryx_refsource_SECUNIA
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ…	vendor-advisoryx_refsource_AIXAPAR
http://www.vupen.com/english/advisories/2007/2914	vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2007-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26217	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26509	third-party-advisoryx_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/…	vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/26444	vdb-entryx_refsource_BID
http://www.securiteam.com/securitynews/5VP0L0UM0A.html	x_refsource_MISC
http://h20000.www2.hp.com/bizsupport/TechSupport/…	vendor-advisoryx_refsource_HP
http://secunia.com/advisories/26605	third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/26607	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474856/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26148	third-party-advisoryx_refsource_SECUNIA
http://security.freebsd.org/advisories/FreeBSD-SA…	vendor-advisoryx_refsource_FREEBSD
http://www.kb.cert.org/vuls/id/252735	third-party-advisoryx_refsource_CERT-VN
http://www.trusteer.com/docs/bind9dns.html	x_refsource_MISC
http://secunia.com/advisories/26180	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/26152	third-party-advisoryx_refsource_SECUNIA
http://www.trustix.org/errata/2007/0023/	vendor-advisoryx_refsource_TRUSTIX
http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM
http://www.slackware.org/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://docs.info.apple.com/article.html?artnum=307041	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/474516/100…	mailing-listx_refsource_BUGTRAQ
http://www.isc.org/index.pl?/sw/bind/bind-security.php	x_refsource_CONFIRM
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ…	vendor-advisoryx_refsource_AIXAPAR
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/2782	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/26227	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26261	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/3868	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/25037	vdb-entryx_refsource_BID
http://secunia.com/advisories/26515	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-491-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/26330	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1587	x_refsource_CONFIRM
http://h20000.www2.hp.com/bizsupport/TechSupport/…	vendor-advisoryx_refsource_HP
http://www.securitytracker.com/id?1018442	vdb-entryx_refsource_SECTRACK
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.debian.org/security/2007/dsa-1341	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/26308	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.vupen.com/english/advisories/2007/2627	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/27643	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26236	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2662	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/26195	third-party-advisoryx_refsource_SECUNIA
ftp://aix.software.ibm.com/aix/efixes/security/README	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/3242	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.openpkg.com/security/advisories/OpenPK…	vendor-advisoryx_refsource_OPENPKG
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	third-party-advisoryx_refsource_CERT
http://secunia.com/advisories/26925	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26160	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474545/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/474808/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26531	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-07-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:57:54.738Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.trusteer.com/docs/bind9dns_s.html"
          },
          {
            "name": "26231",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26231"
          },
          {
            "name": "ADV-2007-2932",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2932"
          },
          {
            "name": "HPSBOV03226",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
          },
          {
            "name": "26847",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26847"
          },
          {
            "name": "IZ02218",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02218\u0026apar=only"
          },
          {
            "name": "ADV-2007-2914",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2914"
          },
          {
            "name": "RHSA-2007:0740",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0740.html"
          },
          {
            "name": "26217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26217"
          },
          {
            "name": "SSRT101004",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
          },
          {
            "name": "26509",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26509"
          },
          {
            "name": "HPSBOV02261",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"
          },
          {
            "name": "26444",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26444"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securiteam.com/securitynews/5VP0L0UM0A.html"
          },
          {
            "name": "HPSBUX02251",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
          },
          {
            "name": "26605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26605"
          },
          {
            "name": "103018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"
          },
          {
            "name": "MDKSA-2007:149",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"
          },
          {
            "name": "26607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26607"
          },
          {
            "name": "20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474856/100/0/threaded"
          },
          {
            "name": "26148",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26148"
          },
          {
            "name": "FreeBSD-SA-07:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"
          },
          {
            "name": "VU#252735",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/252735"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.trusteer.com/docs/bind9dns.html"
          },
          {
            "name": "26180",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26180"
          },
          {
            "name": "GLSA-200708-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"
          },
          {
            "name": "26152",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26152"
          },
          {
            "name": "2007-0023",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0023/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=623903"
          },
          {
            "name": "SSA:2007-207-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.org/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.521385"
          },
          {
            "name": "APPLE-SA-2007-11-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307041"
          },
          {
            "name": "20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474516/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.isc.org/index.pl?/sw/bind/bind-security.php"
          },
          {
            "name": "IZ02219",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02219\u0026apar=only"
          },
          {
            "name": "isc-bind-queryid-spoofing(35575)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"
          },
          {
            "name": "ADV-2007-2782",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2782"
          },
          {
            "name": "26227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26227"
          },
          {
            "name": "26261",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26261"
          },
          {
            "name": "ADV-2007-3868",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3868"
          },
          {
            "name": "25037",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25037"
          },
          {
            "name": "26515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26515"
          },
          {
            "name": "USN-491-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-491-1"
          },
          {
            "name": "26330",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26330"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1587"
          },
          {
            "name": "HPSBTU02256",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"
          },
          {
            "name": "1018442",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018442"
          },
          {
            "name": "20070801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"
          },
          {
            "name": "DSA-1341",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1341"
          },
          {
            "name": "26308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26308"
          },
          {
            "name": "SUSE-SA:2007:047",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_47_bind.html"
          },
          {
            "name": "ADV-2007-2627",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2627"
          },
          {
            "name": "oval:org.mitre.oval:def:2226",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"
          },
          {
            "name": "27643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27643"
          },
          {
            "name": "26236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26236"
          },
          {
            "name": "ADV-2007-2662",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2662"
          },
          {
            "name": "26195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26195"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://aix.software.ibm.com/aix/efixes/security/README"
          },
          {
            "name": "ADV-2007-3242",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3242"
          },
          {
            "name": "oval:org.mitre.oval:def:10293",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"
          },
          {
            "name": "OpenPKG-SA-2007.022",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"
          },
          {
            "name": "TA07-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
          },
          {
            "name": "26925",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26925"
          },
          {
            "name": "26160",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26160"
          },
          {
            "name": "20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474545/100/0/threaded"
          },
          {
            "name": "SSRT071449",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
          },
          {
            "name": "20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474808/100/0/threaded"
          },
          {
            "name": "26531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26531"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.trusteer.com/docs/bind9dns_s.html"
        },
        {
          "name": "26231",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26231"
        },
        {
          "name": "ADV-2007-2932",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2932"
        },
        {
          "name": "HPSBOV03226",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
        },
        {
          "name": "26847",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26847"
        },
        {
          "name": "IZ02218",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02218\u0026apar=only"
        },
        {
          "name": "ADV-2007-2914",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2914"
        },
        {
          "name": "RHSA-2007:0740",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0740.html"
        },
        {
          "name": "26217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26217"
        },
        {
          "name": "SSRT101004",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
        },
        {
          "name": "26509",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26509"
        },
        {
          "name": "HPSBOV02261",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"
        },
        {
          "name": "26444",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26444"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securiteam.com/securitynews/5VP0L0UM0A.html"
        },
        {
          "name": "HPSBUX02251",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
        },
        {
          "name": "26605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26605"
        },
        {
          "name": "103018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"
        },
        {
          "name": "MDKSA-2007:149",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"
        },
        {
          "name": "26607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26607"
        },
        {
          "name": "20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474856/100/0/threaded"
        },
        {
          "name": "26148",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26148"
        },
        {
          "name": "FreeBSD-SA-07:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"
        },
        {
          "name": "VU#252735",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/252735"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.trusteer.com/docs/bind9dns.html"
        },
        {
          "name": "26180",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26180"
        },
        {
          "name": "GLSA-200708-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"
        },
        {
          "name": "26152",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26152"
        },
        {
          "name": "2007-0023",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0023/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=623903"
        },
        {
          "name": "SSA:2007-207-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.org/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.521385"
        },
        {
          "name": "APPLE-SA-2007-11-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=307041"
        },
        {
          "name": "20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474516/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.isc.org/index.pl?/sw/bind/bind-security.php"
        },
        {
          "name": "IZ02219",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02219\u0026apar=only"
        },
        {
          "name": "isc-bind-queryid-spoofing(35575)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"
        },
        {
          "name": "ADV-2007-2782",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2782"
        },
        {
          "name": "26227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26227"
        },
        {
          "name": "26261",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26261"
        },
        {
          "name": "ADV-2007-3868",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3868"
        },
        {
          "name": "25037",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25037"
        },
        {
          "name": "26515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26515"
        },
        {
          "name": "USN-491-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-491-1"
        },
        {
          "name": "26330",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26330"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1587"
        },
        {
          "name": "HPSBTU02256",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"
        },
        {
          "name": "1018442",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018442"
        },
        {
          "name": "20070801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"
        },
        {
          "name": "DSA-1341",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1341"
        },
        {
          "name": "26308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26308"
        },
        {
          "name": "SUSE-SA:2007:047",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_47_bind.html"
        },
        {
          "name": "ADV-2007-2627",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2627"
        },
        {
          "name": "oval:org.mitre.oval:def:2226",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"
        },
        {
          "name": "27643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27643"
        },
        {
          "name": "26236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26236"
        },
        {
          "name": "ADV-2007-2662",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2662"
        },
        {
          "name": "26195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26195"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://aix.software.ibm.com/aix/efixes/security/README"
        },
        {
          "name": "ADV-2007-3242",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3242"
        },
        {
          "name": "oval:org.mitre.oval:def:10293",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"
        },
        {
          "name": "OpenPKG-SA-2007.022",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"
        },
        {
          "name": "TA07-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
        },
        {
          "name": "26925",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26925"
        },
        {
          "name": "26160",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26160"
        },
        {
          "name": "20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474545/100/0/threaded"
        },
        {
          "name": "SSRT071449",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
        },
        {
          "name": "20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474808/100/0/threaded"
        },
        {
          "name": "26531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26531"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2007-2926",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm"
            },
            {
              "name": "http://www.trusteer.com/docs/bind9dns_s.html",
              "refsource": "MISC",
              "url": "http://www.trusteer.com/docs/bind9dns_s.html"
            },
            {
              "name": "26231",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26231"
            },
            {
              "name": "ADV-2007-2932",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2932"
            },
            {
              "name": "HPSBOV03226",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
            },
            {
              "name": "26847",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26847"
            },
            {
              "name": "IZ02218",
              "refsource": "AIXAPAR",
              "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02218\u0026apar=only"
            },
            {
              "name": "ADV-2007-2914",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2914"
            },
            {
              "name": "RHSA-2007:0740",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0740.html"
            },
            {
              "name": "26217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26217"
            },
            {
              "name": "SSRT101004",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
            },
            {
              "name": "26509",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26509"
            },
            {
              "name": "HPSBOV02261",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368"
            },
            {
              "name": "26444",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26444"
            },
            {
              "name": "http://www.securiteam.com/securitynews/5VP0L0UM0A.html",
              "refsource": "MISC",
              "url": "http://www.securiteam.com/securitynews/5VP0L0UM0A.html"
            },
            {
              "name": "HPSBUX02251",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
            },
            {
              "name": "26605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26605"
            },
            {
              "name": "103018",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1"
            },
            {
              "name": "MDKSA-2007:149",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:149"
            },
            {
              "name": "26607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26607"
            },
            {
              "name": "20070727 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474856/100/0/threaded"
            },
            {
              "name": "26148",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26148"
            },
            {
              "name": "FreeBSD-SA-07:07",
              "refsource": "FREEBSD",
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc"
            },
            {
              "name": "VU#252735",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/252735"
            },
            {
              "name": "http://www.trusteer.com/docs/bind9dns.html",
              "refsource": "MISC",
              "url": "http://www.trusteer.com/docs/bind9dns.html"
            },
            {
              "name": "26180",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26180"
            },
            {
              "name": "GLSA-200708-13",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml"
            },
            {
              "name": "26152",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26152"
            },
            {
              "name": "2007-0023",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0023/"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=623903",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=623903"
            },
            {
              "name": "SSA:2007-207-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.org/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.521385"
            },
            {
              "name": "APPLE-SA-2007-11-14",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307041",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=307041"
            },
            {
              "name": "20070724 \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474516/100/0/threaded"
            },
            {
              "name": "http://www.isc.org/index.pl?/sw/bind/bind-security.php",
              "refsource": "CONFIRM",
              "url": "http://www.isc.org/index.pl?/sw/bind/bind-security.php"
            },
            {
              "name": "IZ02219",
              "refsource": "AIXAPAR",
              "url": "http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IZ02219\u0026apar=only"
            },
            {
              "name": "isc-bind-queryid-spoofing(35575)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35575"
            },
            {
              "name": "ADV-2007-2782",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2782"
            },
            {
              "name": "26227",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26227"
            },
            {
              "name": "26261",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26261"
            },
            {
              "name": "ADV-2007-3868",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3868"
            },
            {
              "name": "25037",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25037"
            },
            {
              "name": "26515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26515"
            },
            {
              "name": "USN-491-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-491-1"
            },
            {
              "name": "26330",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26330"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1587",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1587"
            },
            {
              "name": "HPSBTU02256",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600"
            },
            {
              "name": "1018442",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018442"
            },
            {
              "name": "20070801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc"
            },
            {
              "name": "DSA-1341",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1341"
            },
            {
              "name": "26308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26308"
            },
            {
              "name": "SUSE-SA:2007:047",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_47_bind.html"
            },
            {
              "name": "ADV-2007-2627",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2627"
            },
            {
              "name": "oval:org.mitre.oval:def:2226",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226"
            },
            {
              "name": "27643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27643"
            },
            {
              "name": "26236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26236"
            },
            {
              "name": "ADV-2007-2662",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2662"
            },
            {
              "name": "26195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26195"
            },
            {
              "name": "ftp://aix.software.ibm.com/aix/efixes/security/README",
              "refsource": "CONFIRM",
              "url": "ftp://aix.software.ibm.com/aix/efixes/security/README"
            },
            {
              "name": "ADV-2007-3242",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3242"
            },
            {
              "name": "oval:org.mitre.oval:def:10293",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293"
            },
            {
              "name": "OpenPKG-SA-2007.022",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html"
            },
            {
              "name": "TA07-319A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
            },
            {
              "name": "26925",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26925"
            },
            {
              "name": "26160",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26160"
            },
            {
              "name": "20070724 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474545/100/0/threaded"
            },
            {
              "name": "SSRT071449",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426"
            },
            {
              "name": "20070726 Re: \"BIND 9 DNS Cache Poisoning\" by Amit Klein (Trusteer)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474808/100/0/threaded"
            },
            {
              "name": "26531",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26531"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2007-2926",
    "datePublished": "2007-07-24T17:00:00.000Z",
    "dateReserved": "2007-05-30T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:57:54.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-02602 (CVE-2007-2926)

CVE-2007-2926 (GCVE-0-2007-2926)

Tags

Sightings

Nomenclature

Related by attack behaviour