← Database

CVE-2008-4099

MEDIUM CVSS: 6.4 Published: 2008-09-18 Modified: 2026-06-16

Description

PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Affected Platforms

Debian LinuxDebian Python-Dns

Weakness Type

CWE-16

References