bind

• Vulnerable: 9.4.2-2
• Unaffected: 9.4.2-3kalgan1

A vulnerability has been reported in ISC BIND, which can be exploited by malicious people to poison the DNS cache. The vulnerability is caused due to the DNS servers not sufficiently randomising the DNS query port number, which can be exploited to poison the DNS cache.

• Bug Tracker URL: http://bugs.frugalware.org/task/3219

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447