Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2000-1218

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2000-1218
Last Modified 05 Sep 2008 04:22:56
Published 14 Apr 2000 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2000-1218

Summary

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Vulnerable Systems

Operating System

  • Microsoft Windows 2000

  • Microsoft Windows 98

  • Microsoft Windows 98se

  • Microsoft Windows Nt 4.0

  • Microsoft Windows Xp


References

CERT-VN - VU#458659

XF - win2k-dns-resolver(4280)


Last Updated: 27 May 2016 10:36:04