DNS Spoofing Vulnerability in Apple Bonjour for Windows
CVE-2008-3630

Currently unrated

Key Information:

Vendor
Apple
Status
Bonjour
Vendor
CVE Published:
11 September 2008

Summary

The mDNSResponder component within Apple Bonjour for Windows, specifically prior to version 1.0.5, exhibits a security flaw where it fails to utilize random values for transaction IDs and source ports in DNS requests. This predictability facilitates remote attackers to execute DNS spoofing attacks, potentially resulting in incorrect DNS responses being processed by applications relying on the Bonjour API.

References

http://secunia.com/advisories/31822
third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT2990
x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce//2008/S...
vendor-advisoryx_refsource_APPLE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.