CVE-2007-3377

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all…

published June 25, 2007

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02049 · 81.0th percentile
Published
2007-06-25T21:00Z
EPSS history
Timeline
  • 25 JUN 21:00Z
    Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all…
    cvelistv5