CVE Vulnerabilities

CVE-2008-1148

Published: Mar 04, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka Algorithm A0), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple 10.0 (including) 10.0 (including)
Mac_os_x Apple 10.0.1 (including) 10.0.1 (including)
Mac_os_x Apple 10.0.2 (including) 10.0.2 (including)
Mac_os_x Apple 10.0.3 (including) 10.0.3 (including)
Mac_os_x Apple 10.0.4 (including) 10.0.4 (including)
Mac_os_x Apple 10.1 (including) 10.1 (including)
Mac_os_x Apple 10.1.1 (including) 10.1.1 (including)
Mac_os_x Apple 10.1.2 (including) 10.1.2 (including)
Mac_os_x Apple 10.1.3 (including) 10.1.3 (including)
Mac_os_x Apple 10.1.4 (including) 10.1.4 (including)
Mac_os_x Apple 10.1.5 (including) 10.1.5 (including)
Mac_os_x Apple 10.2 (including) 10.2 (including)
Mac_os_x Apple 10.2.1 (including) 10.2.1 (including)
Mac_os_x Apple 10.2.2 (including) 10.2.2 (including)
Mac_os_x Apple 10.2.3 (including) 10.2.3 (including)
Mac_os_x Apple 10.2.4 (including) 10.2.4 (including)
Mac_os_x Apple 10.2.5 (including) 10.2.5 (including)
Mac_os_x Apple 10.2.6 (including) 10.2.6 (including)
Mac_os_x Apple 10.2.7 (including) 10.2.7 (including)
Mac_os_x Apple 10.2.8 (including) 10.2.8 (including)
Mac_os_x Apple 10.3 (including) 10.3 (including)
Mac_os_x Apple 10.3.1 (including) 10.3.1 (including)
Mac_os_x Apple 10.3.2 (including) 10.3.2 (including)
Mac_os_x Apple 10.3.3 (including) 10.3.3 (including)
Mac_os_x Apple 10.3.4 (including) 10.3.4 (including)
Mac_os_x Apple 10.3.5 (including) 10.3.5 (including)
Mac_os_x Apple 10.3.6 (including) 10.3.6 (including)
Mac_os_x Apple 10.3.7 (including) 10.3.7 (including)
Mac_os_x Apple 10.3.8 (including) 10.3.8 (including)
Mac_os_x Apple 10.3.9 (including) 10.3.9 (including)
Mac_os_x Apple 10.4 (including) 10.4 (including)
Mac_os_x Apple 10.4.1 (including) 10.4.1 (including)
Mac_os_x Apple 10.4.2 (including) 10.4.2 (including)
Mac_os_x Apple 10.4.3 (including) 10.4.3 (including)
Mac_os_x Apple 10.4.4 (including) 10.4.4 (including)
Mac_os_x Apple 10.4.5 (including) 10.4.5 (including)
Mac_os_x Apple 10.4.6 (including) 10.4.6 (including)
Mac_os_x Apple 10.4.7 (including) 10.4.7 (including)
Mac_os_x Apple 10.4.8 (including) 10.4.8 (including)
Mac_os_x Apple 10.4.9 (including) 10.4.9 (including)
Mac_os_x Apple 10.4.10 (including) 10.4.10 (including)
Mac_os_x Apple 10.4.11 (including) 10.4.11 (including)
Mac_os_x Apple 10.5 (including) 10.5 (including)
Mac_os_x Apple 10.5.1 (including) 10.5.1 (including)
Mac_os_x_server Apple 10.0 (including) 10.0 (including)
Mac_os_x_server Apple 10.1 (including) 10.1 (including)
Mac_os_x_server Apple 10.1.1 (including) 10.1.1 (including)
Mac_os_x_server Apple 10.1.2 (including) 10.1.2 (including)
Mac_os_x_server Apple 10.1.3 (including) 10.1.3 (including)
Mac_os_x_server Apple 10.1.4 (including) 10.1.4 (including)
Mac_os_x_server Apple 10.1.5 (including) 10.1.5 (including)
Mac_os_x_server Apple 10.2 (including) 10.2 (including)
Mac_os_x_server Apple 10.2.1 (including) 10.2.1 (including)
Mac_os_x_server Apple 10.2.2 (including) 10.2.2 (including)
Mac_os_x_server Apple 10.2.3 (including) 10.2.3 (including)
Mac_os_x_server Apple 10.2.4 (including) 10.2.4 (including)
Mac_os_x_server Apple 10.2.5 (including) 10.2.5 (including)
Mac_os_x_server Apple 10.2.6 (including) 10.2.6 (including)
Mac_os_x_server Apple 10.2.7 (including) 10.2.7 (including)
Mac_os_x_server Apple 10.2.8 (including) 10.2.8 (including)
Mac_os_x_server Apple 10.3 (including) 10.3 (including)
Mac_os_x_server Apple 10.3.1 (including) 10.3.1 (including)
Mac_os_x_server Apple 10.3.2 (including) 10.3.2 (including)
Mac_os_x_server Apple 10.3.3 (including) 10.3.3 (including)
Mac_os_x_server Apple 10.3.4 (including) 10.3.4 (including)
Mac_os_x_server Apple 10.3.5 (including) 10.3.5 (including)
Mac_os_x_server Apple 10.3.6 (including) 10.3.6 (including)
Mac_os_x_server Apple 10.3.7 (including) 10.3.7 (including)
Mac_os_x_server Apple 10.3.8 (including) 10.3.8 (including)
Mac_os_x_server Apple 10.3.9 (including) 10.3.9 (including)
Mac_os_x_server Apple 10.4 (including) 10.4 (including)
Mac_os_x_server Apple 10.4.1 (including) 10.4.1 (including)
Mac_os_x_server Apple 10.4.2 (including) 10.4.2 (including)
Mac_os_x_server Apple 10.4.3 (including) 10.4.3 (including)
Mac_os_x_server Apple 10.4.4 (including) 10.4.4 (including)
Mac_os_x_server Apple 10.4.5 (including) 10.4.5 (including)
Mac_os_x_server Apple 10.4.6 (including) 10.4.6 (including)
Mac_os_x_server Apple 10.4.7 (including) 10.4.7 (including)
Mac_os_x_server Apple 10.4.8 (including) 10.4.8 (including)
Mac_os_x_server Apple 10.4.9 (including) 10.4.9 (including)
Mac_os_x_server Apple 10.4.10 (including) 10.4.10 (including)
Mac_os_x_server Apple 10.4.11 (including) 10.4.11 (including)
Mac_os_x_server Apple 10.5 (including) 10.5 (including)
Dragonflybsd Dragonflybsd 1.0 (including) 1.0 (including)
Dragonflybsd Dragonflybsd 1.1 (including) 1.1 (including)
Dragonflybsd Dragonflybsd 1.2 (including) 1.2 (including)
Dragonflybsd Dragonflybsd 1.10.1 (including) 1.10.1 (including)
Freebsd Freebsd 4.4 (including) 4.4 (including)
Freebsd Freebsd 4.4-release_p42 (including) 4.4-release_p42 (including)
Freebsd Freebsd 4.4-releng (including) 4.4-releng (including)
Freebsd Freebsd 4.4-stable (including) 4.4-stable (including)
Freebsd Freebsd 4.5 (including) 4.5 (including)
Freebsd Freebsd 4.5-release (including) 4.5-release (including)
Freebsd Freebsd 4.5-release_p32 (including) 4.5-release_p32 (including)
Freebsd Freebsd 4.5-releng (including) 4.5-releng (including)
Freebsd Freebsd 4.5-stable (including) 4.5-stable (including)
Freebsd Freebsd 4.6 (including) 4.6 (including)
Freebsd Freebsd 4.6-release (including) 4.6-release (including)
Freebsd Freebsd 4.6-release_p20 (including) 4.6-release_p20 (including)
Freebsd Freebsd 4.6-releng (including) 4.6-releng (including)
Freebsd Freebsd 4.6-stable (including) 4.6-stable (including)
Freebsd Freebsd 4.6.2 (including) 4.6.2 (including)
Freebsd Freebsd 4.7 (including) 4.7 (including)
Freebsd Freebsd 4.7-release (including) 4.7-release (including)
Freebsd Freebsd 4.7-release_p17 (including) 4.7-release_p17 (including)
Freebsd Freebsd 4.7-releng (including) 4.7-releng (including)
Freebsd Freebsd 4.7-stable (including) 4.7-stable (including)
Freebsd Freebsd 4.8 (including) 4.8 (including)
Freebsd Freebsd 4.8-release_p7 (including) 4.8-release_p7 (including)
Freebsd Freebsd 4.8-releng (including) 4.8-releng (including)
Freebsd Freebsd 4.8_prerelease (including) 4.8_prerelease (including)
Freebsd Freebsd 4.9 (including) 4.9 (including)
Freebsd Freebsd 4.9-releng (including) 4.9-releng (including)
Freebsd Freebsd 4.9_prerelease (including) 4.9_prerelease (including)
Freebsd Freebsd 4.10 (including) 4.10 (including)
Freebsd Freebsd 4.10-release (including) 4.10-release (including)
Freebsd Freebsd 4.10-release_p8 (including) 4.10-release_p8 (including)
Freebsd Freebsd 4.10-releng (including) 4.10-releng (including)
Freebsd Freebsd 4.10_prerelease (including) 4.10_prerelease (including)
Freebsd Freebsd 4.11-release_p3 (including) 4.11-release_p3 (including)
Freebsd Freebsd 4.11-releng (including) 4.11-releng (including)
Freebsd Freebsd 4.11-stable (including) 4.11-stable (including)
Freebsd Freebsd 4.11_p20_release (including) 4.11_p20_release (including)
Freebsd Freebsd 4.11_release (including) 4.11_release (including)
Freebsd Freebsd 5.0 (including) 5.0 (including)
Freebsd Freebsd 5.0-alpha (including) 5.0-alpha (including)
Freebsd Freebsd 5.0-release_p14 (including) 5.0-release_p14 (including)
Freebsd Freebsd 5.0-releng (including) 5.0-releng (including)
Freebsd Freebsd 5.1 (including) 5.1 (including)
Freebsd Freebsd 5.1-alpha (including) 5.1-alpha (including)
Freebsd Freebsd 5.1-release (including) 5.1-release (including)
Freebsd Freebsd 5.1-release_p5 (including) 5.1-release_p5 (including)
Freebsd Freebsd 5.1-releng (including) 5.1-releng (including)
Freebsd Freebsd 5.2 (including) 5.2 (including)
Freebsd Freebsd 5.2.1-release (including) 5.2.1-release (including)
Freebsd Freebsd 5.2.1-releng (including) 5.2.1-releng (including)
Freebsd Freebsd 5.3 (including) 5.3 (including)
Freebsd Freebsd 5.3-release (including) 5.3-release (including)
Freebsd Freebsd 5.3-releng (including) 5.3-releng (including)
Freebsd Freebsd 5.3-stable (including) 5.3-stable (including)
Freebsd Freebsd 5.4-release (including) 5.4-release (including)
Freebsd Freebsd 5.4-releng (including) 5.4-releng (including)
Freebsd Freebsd 5.4-stable (including) 5.4-stable (including)
Freebsd Freebsd 5.5_release (including) 5.5_release (including)
Freebsd Freebsd 5.5_stable (including) 5.5_stable (including)
Freebsd Freebsd 6.0 (including) 6.0 (including)
Freebsd Freebsd 6.0-release (including) 6.0-release (including)
Freebsd Freebsd 6.0-stable (including) 6.0-stable (including)
Freebsd Freebsd 6.0_p5_release (including) 6.0_p5_release (including)
Freebsd Freebsd 6.1 (including) 6.1 (including)
Freebsd Freebsd 6.1-release (including) 6.1-release (including)
Freebsd Freebsd 6.1-release_p10 (including) 6.1-release_p10 (including)
Freebsd Freebsd 6.1-stable (including) 6.1-stable (including)
Freebsd Freebsd 6.2 (including) 6.2 (including)
Freebsd Freebsd 6.2-stable (including) 6.2-stable (including)
Freebsd Freebsd 6.2_releng (including) 6.2_releng (including)
Freebsd Freebsd 6.3 (including) 6.3 (including)
Freebsd Freebsd 6.3_releng (including) 6.3_releng (including)
Freebsd Freebsd 7.0-pre-release (including) 7.0-pre-release (including)
Freebsd Freebsd 7.0_beta4 (including) 7.0_beta4 (including)
Freebsd Freebsd 7.0_releng (including) 7.0_releng (including)
Netbsd Netbsd 1.6.2 (including) 1.6.2 (including)
Netbsd Netbsd 2.0 (including) 2.0 (including)
Netbsd Netbsd 2.0.1 (including) 2.0.1 (including)
Netbsd Netbsd 2.0.2 (including) 2.0.2 (including)
Netbsd Netbsd 2.0.3 (including) 2.0.3 (including)
Netbsd Netbsd 2.0.4 (including) 2.0.4 (including)
Netbsd Netbsd 2.1 (including) 2.1 (including)
Netbsd Netbsd 2.1.1 (including) 2.1.1 (including)
Netbsd Netbsd 3.0.1 (including) 3.0.1 (including)
Netbsd Netbsd 3.0.2 (including) 3.0.2 (including)
Netbsd Netbsd 3.1 (including) 3.1 (including)
Netbsd Netbsd 3.1-rc1 (including) 3.1-rc1 (including)
Netbsd Netbsd 3.1-rc3 (including) 3.1-rc3 (including)
Netbsd Netbsd 4.0 (including) 4.0 (including)
Netbsd Netbsd 4.0-beta (including) 4.0-beta (including)
Netbsd Netbsd 4.0-beta2 (including) 4.0-beta2 (including)
Openbsd Openbsd 2.6 (including) 2.6 (including)
Openbsd Openbsd 2.7 (including) 2.7 (including)
Openbsd Openbsd 2.8 (including) 2.8 (including)
Openbsd Openbsd 2.9 (including) 2.9 (including)
Openbsd Openbsd 3.0 (including) 3.0 (including)
Openbsd Openbsd 3.1 (including) 3.1 (including)
Openbsd Openbsd 3.2 (including) 3.2 (including)
Openbsd Openbsd 3.3 (including) 3.3 (including)
Openbsd Openbsd 3.4 (including) 3.4 (including)
Openbsd Openbsd 3.5 (including) 3.5 (including)
Openbsd Openbsd 3.6 (including) 3.6 (including)
Openbsd Openbsd 3.7 (including) 3.7 (including)
Openbsd Openbsd 3.8 (including) 3.8 (including)
Openbsd Openbsd 3.9 (including) 3.9 (including)
Openbsd Openbsd 4.0 (including) 4.0 (including)
Openbsd Openbsd 4.1 (including) 4.1 (including)
Openbsd Openbsd 4.2 (including) 4.2 (including)

References