{"uuid": "f3164d56-f7ee-4282-996a-62239e23bbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-1447", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/spoof/dns/bailiwicked_domain.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"I)ruid \", \"hdm \", \"Cedric Blancher \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This exploit attacks a fairly ubiquitous flaw in DNS implementations which\\n          Dan Kaminsky found and disclosed ~Jul 2008.  This exploit replaces the target\\n          domains nameserver entries in a vulnerable DNS cache server. This attack works\\n          by sending random hostname queries to the target DNS server coupled with spoofed\\n          replies to those queries from the authoritative nameservers for that domain.\\n          Eventually, a guessed ID will match, the spoofed packet will get accepted, and\\n          the nameserver entries for the target domain will be replaced by the server\\n          specified in the NEWDNS option of this exploit.\", \"disclosure_date\": \"2008-07-21\", \"fullname\": \"auxiliary/spoof/dns/bailiwicked_domain\", \"is_install_path\": true, \"mod_time\": \"2026-06-11 10:10:30 +0000\", \"name\": \"DNS BailiWicked Domain Attack\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/auxiliary/spoof/dns/bailiwicked_domain.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"spoof/dns/bailiwicked_domain\", \"references\": [\"CVE-2008-1447\", \"OSVDB-46776\", \"US-CERT-VU-800113\", \"URL-http://web.archive.org/web/20160527135835/http://www.caughq.org/exploits/CAU-EX-2008-0003.txt\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:14.012461Z"}