PT-2007-3025 · Microsoft · Windows Dns Server

Andres Tarasco Acuña · Published 2007-03-24 · Updated 2017-10-11 · CVE-2007-1644

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows DNS Server (affected versions not specified)

Description: The issue concerns the dynamic DNS update mechanism in the DNS Server service on Microsoft Windows, which fails to properly authenticate clients under certain conditions. This allows remote attackers to modify DNS records, potentially leading to man-in-the-middle attacks on web traffic, pharming attacks through DNS record poisoning, and denial of service due to erroneous name resolution.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1644

Affected Products

Windows Dns Server

References · 4

• 🔥 https://exploit-db.com/exploits/3544 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1644 · Security Note
• http://osvdb.org/43603 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33473 · Note