Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

Gentoo GLSA-200708-13 Normal: BIND Weak Random Number Generation

gentoo
Calendar Grey August 18, 2007
Scroller Gentoo
Gentoo GLSA 202309-07 tackles vulnerabilities in OpenSSL's key generation, emphasizes potential threats, and recommends updates.
The ISC BIND random number generator uses a weak algorithm, making it easier to guess the next query ID and perform a DNS cache poisoning attack

Summary

Gentoo Linux Security Advisory GLSA 200708-13 https://security.gentoo.org/ Severity: Normal Title: BIND: Weak random number generation Date: August 18, 2007 Bugs: #186556 ID: 200708-13

Synopsis ======= The ISC BIND random number generator uses a weak algorithm, making it easier to guess the next query ID and perform a DNS cache poisoning attack.
Background ========= ISC BIND is the Internet Systems Consortium implementation of the Domain Name System (DNS) protocol.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dns/bind < 9.4.1_p1 >= 9.4.1_p1
========== Amit Klein from Trusteer reported that the random number generator of ISC BIND leads, half the tim...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo bind cache poisoning dns attack random number normal

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo bind cache poisoning dns attack random number normal

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround