CVE-2008-1637

CVE-2008-1637 describes a vulnerability in PowerDNS Recursor versions prior to 3.1.5, where insufficient randomness in generating TRXID values and UDP source port numbers could lead to DNS cache poisoning. This issue stems from algorithmic deficiencies in random functions, a 32-bit seed, and reliance on time as the sole seeding information. The vulnerability carries a CVSS score of 6.8 (Medium), indicating a network-based attack with medium complexity that could result in partial confidentiality, integrity, and availability impacts. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, further indicating a lack of widespread attention or exploitation.