CVE-2008-3905
04.09.2008, 17:41
resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 𝑥 ≤ 1.8.5 |
| ruby-lang | ruby | 𝑥 ≤ 1.8.6 |
| ruby-lang | ruby | 𝑥 ≤ 1.8.7 |
| ruby-lang | ruby | 𝑥 ≤ 1.9 |
| ruby-lang | ruby | 1.6 |
| ruby-lang | ruby | 1.6.8 |
| ruby-lang | ruby | 1.8.0 |
| ruby-lang | ruby | 1.8.1 |
| ruby-lang | ruby | 1.8.2 |
| ruby-lang | ruby | 1.8.3 |
| ruby-lang | ruby | 1.8.4 |
| ruby-lang | ruby | 1.8.6 |
| ruby-lang | ruby | 1.8.6:p110 |
| ruby-lang | ruby | 1.8.6:p111 |
| ruby-lang | ruby | 1.8.6:p114 |
| ruby-lang | ruby | 1.8.6:p230 |
| ruby-lang | ruby | 1.8.6:p36 |
| ruby-lang | ruby | 1.8.6:preview1 |
| ruby-lang | ruby | 1.8.6:preview2 |
| ruby-lang | ruby | 1.8.6:preview3 |
| ruby-lang | ruby | 1.8.7 |
| ruby-lang | ruby | 1.8.7:p17 |
| ruby-lang | ruby | 1.8.7:p22 |
| ruby-lang | ruby | 1.8.7:preview1 |
| ruby-lang | ruby | 1.8.7:preview2 |
| ruby-lang | ruby | 1.8.7:preview3 |
| ruby-lang | ruby | 1.8.7:preview4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||||||||||||||
| ruby1.9 |
|
Common Weakness Enumeration
References