Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2000-1218


Vulnerability Score 7.5 7.5
CVE Id CVE-2000-1218
Last Modified 05 Sep 2008 04:22:56
Published 14 Apr 2000 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE



The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Vulnerable Systems

Operating System

  • Microsoft Windows 2000

  • Microsoft Windows 98

  • Microsoft Windows 98se

  • Microsoft Windows Nt 4.0

  • Microsoft Windows Xp


CERT-VN - VU#458659

XF - win2k-dns-resolver(4280)

Last Updated: 27 May 2016 10:36:04