CVE Feed

    Dashboard / CVE / CVE-2008-4100

    CVE-2008-4100

    GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.

    Published:Sep 11, 2008
    Last Modified:Apr 23, 2026
    EPS:Sep 18, 2008
    EPSS Score:0.0061
    CVSS Score:6.4

    Affected Products

    Vendor
    Gnu
    Product
    Adns

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-9103 (CVSS 9.8) — An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_n…
    CVE-2017-9104 (CVSS 9.8) — An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encounter…
    CVE-2017-9105 (CVSS 8.8) — An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of …
    CVE-2017-9106 (CVSS 7.5) — An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for …
    CVE-2017-9107 (CVSS 7.5) — An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If…
    CVE-2017-9108 (CVSS 7.5) — An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It …
    CVE-2017-9109 (CVSS 9.8) — An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High