CVE-2007-3898 The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies,....
MediumCVSS 6.4
EPSS 52.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
References
- 27584 patch third-party-advisory vendor-advisory
- 3373 third-party-advisory
- VU#484649 third-party-advisory us-government-resource
- www.scanit.be
- 20071113 After 6 months - fix available for Microsoft DNS cache poisoning attack mailing-list
- 20071114 Predictable DNS transaction IDs in Microsoft DNS Server mailing-list
- HPSBST02291 vendor-advisory
- 25919 exploit patch vdb-entry
- 1018942 vdb-entry
- www.trusteer.com
- TA07-317A third-party-advisory us-government-resource
- ADV-2007-3848 vdb-entry
- MS07-062 vendor-advisory
- win-dns-spoof-information-disclosure(36805) vdb-entry
- oval:org.mitre.oval:def:4395 signature vdb-entry