Lucene search
HistoryOct 13, 2000 - 4:00 a.m.
CVE-2000-0335
cve-2000-0335
glibc 2.1.3
dns spoofing
resolver
predictable ids
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.2%
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Affected configurations
Node
gnuglibcMatch2.0
ORgnuglibcMatch2.1
ORgnuglibcMatch2.1.1
ORgnuglibcMatch2.1.2
ORgnuglibcMatch2.1.3
ORiscbindMatch8.2
ORiscbindMatch8.2.1
ORiscbindMatch8.2.2
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.2%
Related for CVE-2000-0335