CVE-2001-1452

Опубликовано: 31 авг. 2001

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.

Ссылки

http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352
Broken Link
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/109475
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/6791
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3675
Third Party Advisory
VDB Entry
http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352
Broken Link
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/109475
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/6791
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3675
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05368

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-346

Связанные уязвимости

GHSA-h6vw-m287-cx84