Unscored CVE-2008-0087 EUVD-2008-0100GHSA-6r5q-pfqq-gh34

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows…

Published Apr 8, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.

References

TA08-099A third-party-advisory
SSRT080048 vendor-advisory
MS08-020 vendor-advisory
29696 third-party-advisory
http://www.trusteer.com/docs/windowsresolver.html
1019802 vdb-entry
oval:org.mitre.oval:def:5314 vdb-entry signature
ADV-2008-1144 vdb-entry
20080408 Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) mailing-list
28553 vdb-entry