CVE-2008-4392

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.

• CWE-362

• http://secunia.com/advisories/33855Vendor Advisory
• http://www.securityfocus.com/bid/33818
• http://www.your.org/dnscache/Patch, Vendor Advisory
• http://www.your.org/dnscache/djbdns.pdfVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48807
• http://secunia.com/advisories/33855Vendor Advisory
• http://www.securityfocus.com/bid/33818
• http://www.your.org/dnscache/Patch, Vendor Advisory
• http://www.your.org/dnscache/djbdns.pdfVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48807

Published

Feb 19, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4385Husdawg, LLC Systems Requirements Lab 3, as used by Instant …
• CVE-2008-4387Unspecified vulnerability in the Simba MDrmSap ActiveX contr…
• CVE-2008-4388The LaunchObj ActiveX control before 5.2.2.865 in launcher.d…
• CVE-2008-4389Symantec AppStream 5.2.x and Symantec Workspace Streaming (S…
• CVE-2008-4390The Cisco Linksys WVC54GC wireless video camera before firmw…7.5
• CVE-2008-4391Stack-based buffer overflow in the SetSource method in the N…
• CVE-2008-4393Cross-site scripting (XSS) vulnerability in VeriSign Kontiki…
• CVE-2008-4394Multiple untrusted search path vulnerabilities in Portage be…
• CVE-2008-4395Multiple buffer overflows in the ndiswrapper module 1.53 for…
• CVE-2008-4396Stack-based buffer overflow in Safer Networking FileAlyzer 1…
• CVE-2008-4397Directory traversal vulnerability in the RPC interface (asdb…
• CVE-2008-4398Unspecified vulnerability in the tape engine service in asdb…