CVE Vulnerability

CVE-2008-1148

A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf
http://www.securiteam.com/securityreviews/5PP0H0UNGW.html
http://www.securityfocus.com/archive/1/487658
http://www.securityfocus.com/bid/27647
http://secunia.com/advisories/28819 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41157
https://exchange.xforce.ibmcloud.com/vulnerabilities/40329
Configurations

Configuration 1
Information

Published : 2008-03-04 11:44

Updated : 2017-08-08 01:29

NVD link : CVE-2008-1148

Mitre link : CVE-2008-1148

Products Affected
No products.
CWE
NVD-CWE-Other