CVE-2008-3630

Published: Sep 11, 2008Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Affected (1)

Products: Apple: Bonjour

Apple

1 product

Bonjour

Configuration A

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Apple Bonjour	Version 1.0.4 unknown

Running on/with	Platform Versions
Microsoft Windows Nt	Version xp sp3
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions