6.4

CVE-2008-3630

EPSS 1.58%
Veröffentlicht 11.09.2008 01:13:09
Zuletzt bearbeitet 16.06.2026 22:56:11
Erkennungen
Login

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Bonjour Version 1.0.4 Update unknown Edition windows

   Microsoft ≫ Windows-nt Version xp Update sp3
   Microsoft ≫ Windows 2000 Version -
   Microsoft ≫ Windows 2003 Server Version -
   Microsoft ≫ Windows Vista Version -
   Microsoft ≫ Windows Xp Version - Update sp2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.58%	0.732

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html

Patch

http://secunia.com/advisories/31822

http://support.apple.com/kb/HT2990

http://www.vupen.com/english/advisories/2008/2524

http://www.securityfocus.com/bid/31093

http://www.securitytracker.com/id?1020844

https://nvd.nist.gov/vuln/detail/CVE-2008-3630

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3630

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3630

EUVD