{"uuid": "08faf28f-176e-4e3a-9170-cea3688958dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-1447", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/spoof/dns/bailiwicked_host.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"I)ruid \", \"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This exploit attacks a fairly ubiquitous flaw in DNS implementations which\\n          Dan Kaminsky found and disclosed ~Jul 2008.  This exploit caches a single\\n          malicious host entry into the target nameserver by sending random hostname\\n          queries to the target DNS server coupled with spoofed replies to those\\n          queries from the authoritative nameservers for that domain. Eventually, a\\n          guessed ID will match, the spoofed packet will get accepted, and due to the\\n          additional hostname entry being within bailiwick constraints of the original\\n          request the malicious host entry will get cached.\", \"disclosure_date\": \"2008-07-21\", \"fullname\": \"auxiliary/spoof/dns/bailiwicked_host\", \"is_install_path\": true, \"mod_time\": \"2026-06-11 10:10:30 +0000\", \"name\": \"DNS BailiWicked Host Attack\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/auxiliary/spoof/dns/bailiwicked_host.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"spoof/dns/bailiwicked_host\", \"references\": [\"CVE-2008-1447\", \"OSVDB-46776\", \"US-CERT-VU-800113\", \"URL-http://web.archive.org/web/20160606120102/http://www.caughq.org:80/exploits/CAU-EX-2008-0002.txt\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:14.105649Z"}