Security Advisory

CVE-2008-4392

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-02-19 16:00:00
Last updated 2024-08-07 10:17:09
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.