Update to newer upstream version - 2.45. Version of dnsmasq previously shipped in Fedora 9 did not properly drop privileges, causing it to run as root instead of intended user nobody. Issue was caused by a bug in kernel-headers used in build environment of the original packages.
(#454415) New upstream version also adds DNS query source port randomization, mitigating DNS spoofing attacks. (CVE-2008-1447)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of dnsmasq uses random UDP source ports and a random TRXID now. (CVE-2008-1447)

The dnsmasq DNS resolver used a fixed source UDP port. This could have made DNS spoofing attacks easier. dnsmasq has been updated to use random UDP source ports, helping to make DNS spoofing attacks harder.
(CVE-2008-1447)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0789 advisory.

    - fixes for CVE-2008-1447/CERT VU#800113

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Microsoft DNS Server running on the remote host contains issues in the DNS library that could allow an attacker to send malicious DNS responses to DNS requests made by the remote host thereby spoofing or redirecting internet traffic from legitimate locations.

The remote host is running a version of BIND DNS server which fails to randomize the UDP source port.  This could allow an attacker to poison the DNS cache.  A poisoned cache means that DNS clients can be directed to rogue sites and greatly simplifies phishing attacks.

The remote host is running a DNS server that is configured to use port 53 as its source port for queries.  This is extremely dangerous as an attacker only needs to spoof a 16-bit transaction ID in order to poison the DNS cache.  A poisoned cache means that DNS clients can be directed to rogue sites and greatly simplifies phishing attacks.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.5.  Mac OS X 10.5.5 contains security fixes for a number of programs.

ID	Name	Product	Family	Published	Updated	Severity
35693	Fedora 9 : dnsmasq-2.45-1.fc9 (2009-1069)	Nessus	Fedora Local Security Checks	2/17/2009	1/11/2021	medium
39951	openSUSE Security Update : dnsmasq (dnsmasq-147)	Nessus	SuSE Local Security Checks	7/21/2009	1/14/2021	medium
60462	Scientific Linux Security Update : dnsmasq on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	medium
67735	Oracle Linux 5 : dnsmasq (ELSA-2008-0789)	Nessus	Oracle Linux Local Security Checks	7/12/2013	4/29/2025	medium
72834	MS08-037: Vulnerabilities in DNS Could Allow Spoofing (951746) (uncredentialed check)	Nessus	DNS	3/5/2014	11/15/2018	high
4578	ISC BIND DNS Query ID Field Prediction Cache Poisoning (deprecated)	Nessus Network Monitor	DNS Servers	8/18/2004	3/6/2019	medium
4601	DNS Server Source Port 53 Query Usage	Nessus Network Monitor	DNS Servers	7/22/2008	3/6/2019	medium
4682	Mac OS X < 10.5.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	9/16/2008	3/6/2019	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

medium

medium

critical