CVE-2007-2926

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-07-24 · updated 2026-06-16

Description

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Affected products

ISC BIND: 9.0, 9.1, 9.2, 9.3, 9.4, 9.5 (+1)

References

http://docs.info.apple.com/article.html?artnum=307041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://marc.info/?l=bugtraq&m=141879471518471&w=2
http://secunia.com/advisories/26148
http://secunia.com/advisories/26152
http://secunia.com/advisories/26160
http://secunia.com/advisories/26180

Get alerted when CVE-2007-2926 or the next vulnerability affects your stack