CVE-2007-3898 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3898
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3898

Description: The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/36805 ST 1018942 SREASON http://securityreason.com/securityalert/3373 SAID Secunia Advisory: SA27584 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4395 MS http://www.microsoft.com/technet/security/bulletin/ms07-062.mspx MISC http://www.scanit.be/advisory-2007-11-14.html http://www.trusteer.com/docs/windowsdns.html HP http://www.securityfocus.com/archive/1/archive/1/484186/100/0/threaded CERT-VN 484649 CERT http://www.us-cert.gov/cas/techalerts/TA07-317A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/483698/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/483635/100/0/threaded BID 25919

Return to the previous page.