CVE-2007-2930

MEDIUM 4.3CVE-2007-2930 · Published 12/09/2007 · updated 16/06/2026

In short

CVE-2007-2930 is a MEDIUM (CVSS 4.3) vulnerability affecting bind (isc).
Chance of exploitation in the next 30 days (EPSS): 7.6%, higher than 94.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bind isc	`≤ 8.4.7`	No fix yet

Description

The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
secunia.com/advisories/26629
secunia.com/advisories/26858
secunia.com/advisories/27433
secunia.com/advisories/27459
secunia.com/advisories/27465
secunia.com/advisories/27696
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
support.avaya.com/elmodocs2/security/ASA-2007-448.htm
support.nortel.com/go/main.jsp
ciac.org/ciac/bulletins/r-333.shtml · Patch
isc.org/index.pl · Patch
kb.cert.org/vuls/id/927905 · Patch
securityfocus.com/archive/1/477870/100/100/threaded

More vulnerabilities in bind

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free