Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting “records from a response that is outside the remote server’s authority,” aka “DNS Cache Poisoning Vulnerability,” a different vulnerability than CVE-2008-1447.

CPENameOperatorVersion
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_server_2003microsoft windows server 2003eq*
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_server_2008microsoft windows server 2008eq*

CPE	Name	Operator	Version
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_server_2003	microsoft windows server 2003	eq	*
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	*

References

secunia.com/advisories/30925

www.securityfocus.com/bid/30132

www.securitytracker.com/id?1020437

www.us-cert.gov/cas/techalerts/TA08-190A.html

www.vupen.com/english/advisories/2008/2019/references

docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380

nessus 38

securityvulns 11

openvas 72

prion 8

mskb 1

seebug 6

cert 1

altlinux 5

exploitpack 3

f5 2

debian 10

checkpoint_security 1

packetstorm 3

oraclelinux 2

centos 2

ubuntu 2

redhat 2

fedora 3

freebsd 2

cve 7

osv 2

checkpoint_advisories 2

slackware 3

freebsd_advisory 1

suse 1

debiancve 2

gentoo 2

ubuntucve 3

rubygems 1

cisco 1

nessus

MS08-037: Vulnerabilities in DNS Could Allow Spoofing (951746) (uncredentialed check)

2014-03-05 00:00:00

MS08-037: Vulnerabilities in DNS Could Allow Spoofing (953230)

2008-07-08 00:00:00

Ubuntu 8.04 LTS : dnsmasq vulnerability (USN-627-1)

2008-07-23 00:00:00

securityvulns

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)

2008-07-09 00:00:00

Microsoft Windows DNS server and DNS client DNS reply spoofing

2008-07-09 00:00:00

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-12 00:00:00

openvas

Vulnerabilities in DNS Could Allow Spoofing (953230)

2008-08-22 00:00:00

Vulnerabilities in DNS Could Allow Spoofing (953230)

2008-08-22 00:00:00

Slackware Advisory SSA:2008-334-01 ruby

2012-09-11 00:00:00

prion

Design/Logic Flaw

2008-07-08 23:41:00

Spoofing

2008-07-08 23:41:00

Design/Logic Flaw

2008-09-18 17:59:00

mskb

MS08-037: Vulnerabilities in DNS could allow spoofing

2018-04-17 19:03:20

seebug

Microsoft Windows DNS服务器缓存中毒漏洞（MS08-037）

2008-07-10 00:00:00

BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (py)

2008-07-24 00:00:00

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (meta)

2008-07-24 00:00:00

cert

Multiple DNS implementations vulnerable to cache poisoning

2008-07-08 00:00:00

altlinux

Security fix for the ALT Linux 5 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 8 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 9 package bind version 9.3.5-alt2

2008-06-06 00:00:00

exploitpack

BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)

2008-07-23 00:00:00

BIND 9.x - Remote DNS Cache Poisoning (Python)

2008-07-24 00:00:00

BIND 9.x - Remote DNS Cache Poisoning

2008-07-25 00:00:00

K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2013-03-19 00:00:00

SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2008-07-10 00:00:00

debian

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-27 09:36:54

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-08 17:05:29

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-27 09:36:54

checkpoint_security

Check Point response to DNS poisoning vulnerability CVE-2008-1447

2008-07-05 21:00:00

packetstorm

bailiwicked_host.rb.txt

2008-07-24 00:00:00

bailiwicked_domain.rb.txt

2008-07-24 00:00:00

bind9x-poison.txt

2008-07-25 00:00:00

oraclelinux

bind security update

2008-07-08 00:00:00

dnsmasq security update

2008-08-11 00:00:00

centos

bind security update

2008-07-09 01:20:56

bind, caching, selinux security update

2008-07-08 22:25:27

ubuntu

Dnsmasq vulnerability

2008-07-22 00:00:00

Bind vulnerability

2008-07-08 00:00:00

redhat

(RHSA-2008:0533) Important: bind security update

2008-07-08 00:00:00

(RHSA-2008:0789) Moderate: dnsmasq security update

2008-08-11 00:00:00

fedora

[SECURITY] Fedora 9 Update: bind-9.5.0-33.P1.fc9

2008-07-09 21:45:32

[SECURITY] Fedora 9 Update: dnsmasq-2.45-1.fc9

2009-02-14 22:11:22

[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9

2009-01-15 02:51:25

freebsd

ruby -- DNS spoofing vulnerability

2008-08-08 00:00:00

FreeBSD -- DNS cache poisoning

2008-07-08 00:00:00

cve

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-3905

2008-09-04 17:41:00

CVE-2008-5133

2008-11-18 16:00:00

osv

refpolicy - incompatible policy

2008-07-25 00:00:00

bind9 - cache poisoning

2008-07-08 00:00:00

checkpoint_advisories

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037) - High Confidence (CVE-2008-1447)

2013-05-09 00:00:00

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037; CVE-2008-1447)

2011-11-01 00:00:00

slackware

[slackware-security] ruby

2008-11-29 21:37:03

[slackware-security] dnsmasq

2008-07-24 00:02:47

[slackware-security] bind

2008-07-10 04:29:01

freebsd_advisory

FreeBSD-SA-08:06.bind

2008-07-13 00:00:00

suse

DNS cache poisoning in bind

2008-07-11 09:57:52

debiancve

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-4099

2008-09-18 17:59:00

gentoo

BIND: Cache poisoning

2008-07-11 00:00:00

pdnsd: Denial of Service and cache poisoning

2009-01-11 00:00:00

ubuntucve

CVE-2008-1447

2008-07-08 00:00:00

CVE-2008-4100

2008-09-18 00:00:00

CVE-2008-4099

2008-09-18 00:00:00

rubygems

ruby -- DNS spoofing vulnerability in resolv.rb

2008-05-04 20:00:00

cisco

Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks

2008-07-08 18:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.3 Medium

AI Score

Confidence

High

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

0.469 Medium

EPSS

Percentile

97.4%

JSON

Related for CVE-2008-1454

nessus38 securityvulns11 openvas72 prion8 mskb1 seebug6 cert1 altlinux5 exploitpack3 f52 debian10 checkpoint_security1 packetstorm3 oraclelinux2 centos2 ubuntu2 redhat2 fedora3 freebsd2 cve7 osv2 checkpoint_advisories2 slackware3 freebsd_advisory1 suse1 debiancve2 gentoo2 ubuntucve3 rubygems1 cisco1