CVE-2008-4100

Name of the Vulnerable Software and Affected Versions GNU adns versions 1.4 and earlier

Description The issue allows remote attackers to spoof DNS responses due to the use of a fixed source port and sequential transaction IDs for DNS requests. This behavior is reported by the vendor as intended and compatible with the product's role in a trusted environment.

Recommendations For GNU adns versions 1.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.