CVE-2008-3630

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for…

published September 10, 2008

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01578 · 75.1th percentile
Published
2008-09-10T16:00Z
EPSS history
Timeline
  • 10 SEP 16:00Z
    mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for…
    cvelistv5