Code injection

2010-01-2016:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.

CPENameOperatorVersion
zeus_web_servereq3.3.1
zeus_web_servereq3.3.3
zeus_web_servereq3.3.6
zeus_web_servereq3.3.4
zeus_web_servereq4.3 r3
zeus_web_servereq4.2
zeus_web_servereq3.3
zeus_web_servereq3.3.7
zeus_web_servereq4.1
zeus_web_servereq4.2 r2

Name	Operator	Version
zeus_web_server	eq	3.3.1
zeus_web_server	eq	3.3.3
zeus_web_server	eq	3.3.6
zeus_web_server	eq	3.3.4
zeus_web_server	eq	4.3 r3
zeus_web_server	eq	4.2
zeus_web_server	eq	3.3
zeus_web_server	eq	3.3.7
zeus_web_server	eq	4.1
zeus_web_server	eq	4.2 r2

Rows per page:

1-10 of 171

References

support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES