PT-2010-2148 · Zeus · Zeus Web Server

Publicado 2010-01-20 · Atualizado 2011-05-06 · CVE-2010-0362

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zeus Web Server versions prior to 4.3r5

Description The issue makes it easier for remote attackers to spoof DNS responses due to the lack of random transaction IDs for DNS requests.

Recommendations For Zeus Web Server versions prior to 4.3r5, update to version 4.3r5 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2010-0362

Produtos afetados

Zeus Web Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-0362 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0362 · Nota
• http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES · Correção