6.4

CVE-2008-3630

EPSS 1.1%
Published 11.09.2008 01:13:09
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Bonjour Version1.0.4 Updateunknown Editionwindows

   Microsoft ≫ Windows-nt Versionxp Updatesp3
   Microsoft ≫ Windows 2000 Version-
   Microsoft ≫ Windows 2003 Server Version-
   Microsoft ≫ Windows Vista Version-
   Microsoft ≫ Windows Xp Version- Updatesp2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.1%	0.774

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html

Patch

http://secunia.com/advisories/31822

http://support.apple.com/kb/HT2990

http://www.vupen.com/english/advisories/2008/2524

http://www.securityfocus.com/bid/31093

http://www.securitytracker.com/id?1020844

https://nvd.nist.gov/vuln/detail/CVE-2008-3630

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3630

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3630

EUVD