CVE-2008-4100

Published: Sep 18, 2008Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.

Affected (14)

Products: Gnu: Adns

Gnu

1 product

Adns

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Gnu Adns	Up to 1.4
Gnu Adns	Version 0.1
Gnu Adns	Version 0.2
Gnu Adns	Version 0.3
Gnu Adns	Version 0.4
Gnu Adns	Version 0.5
Gnu Adns	Version 0.6
Gnu Adns	Version 0.7
Gnu Adns	Version 0.8
Gnu Adns	Version 0.9
Gnu Adns	Version 1.0
Gnu Adns	Version 1.1
Gnu Adns	Version 1.2
Gnu Adns	Version 1.3