Unscored severity · published Sep 11, 2008
CVE-2008-3630
mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source…
–
CVSS
1.6%
EPSS
No
On KEV
Description
mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Bonjour · Apple
1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3630
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3630
Patch
http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html
secunia.com
http://secunia.com/advisories/31822
support.apple.com
http://support.apple.com/kb/HT2990
www.securityfocus.com
http://www.securityfocus.com/bid/31093
www.securitytracker.com
http://www.securitytracker.com/id?1020844
www.vupen.com
http://www.vupen.com/english/advisories/2008/2524
More from Bonjour
5.5
CVE-2011-0220
Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet
–
CVE-2008-2326
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application…