NVD Vulnerability Detail
Search Exploit, PoC
CVE-2007-3377
Summary

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.

Publication Date June 26, 2007, 6:30 a.m.
Registration Date Jan. 29, 2021, 2:15 p.m.
Last Update Oct. 17, 2018, 1:48 a.m.
CVSS2.0 : MEDIUM
Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:P/A:N
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 中
攻撃前の認証要否(Au) 不要
機密性への影響(C) なし
完全性への影響(I) 低
可用性への影響(A) なし
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:nlnet_labs:net_dns:0.14:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.20:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.21:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.22:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.23:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.24:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.25:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.26:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.27:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.28:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.29:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.30:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.31:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.32:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.33:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.34:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.34_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.34_03:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.35:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.36:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.37:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.38:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.38_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.38_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.39:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.39_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.39_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.40:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.40_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.41:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.42:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.42_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.42_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.43:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.44:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.44_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.44_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.45:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.45_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.46:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.47:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.47_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.48:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.48_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.48_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.48_03:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.49:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.49_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.49_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.49_03:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.50:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.51:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.51_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.51_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.52:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.53:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.53_01:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.53_02:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.54:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.55:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.56:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.57:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.58:*:*:*:*:*:*:*
cpe:2.3:a:nlnet_labs:net_dns:0.59:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List