PT-2007-3025 · Microsoft · Windows Dns Server

Andres Tarasco Acuña · Publicado 2007-03-24 · Atualizado 2017-10-11 · CVE-2007-1644

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows DNS Server (affected versions not specified)

Description: The issue concerns the dynamic DNS update mechanism in the DNS Server service on Microsoft Windows, which fails to properly authenticate clients under certain conditions. This allows remote attackers to modify DNS records, potentially leading to man-in-the-middle attacks on web traffic, pharming attacks through DNS record poisoning, and denial of service due to erroneous name resolution.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1644

Produtos afetados

Windows Dns Server

Referências · 4

• 🔥 https://exploit-db.com/exploits/3544 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1644 · Nota de Segurança
• http://osvdb.org/43603 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33473 · Nota