PT-2007-5125 · Microsoft · Windows 2000 Server+1

Published 2007-11-14 · Updated 2021-07-07 · CVE-2007-3898

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000 Server version SP4 Microsoft Windows Server 2003 versions SP1 through SP2

Description: The issue concerns the DNS server in the affected Microsoft Windows versions, which uses predictable transaction IDs when querying other DNS servers. This predictability allows remote attackers to spoof DNS replies and poison the DNS cache, potentially facilitating further attack vectors.

Recommendations: For Microsoft Windows 2000 Server SP4, update to a newer service pack or version to mitigate the risk. For Microsoft Windows Server 2003 SP1, consider applying a patch or updating to SP3 or a later version. For Microsoft Windows Server 2003 SP2, consider applying a patch or updating to a later version.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-3898

Affected Products

Windows 2000 Server

Windows Server 2003

References · 18

• 🔥 https://exploit-db.com/exploits/30635 · Exploit
• 🔥 http://securityfocus.com/bid/25919 · Exploit
• 🔥 https://exploit-db.com/exploits/30636 · Exploit
• http://securityfocus.com/archive/1/484186/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3898 · Security Note
• http://secunia.com/advisories/27584 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-062 · Vendor Advisory
• http://securityfocus.com/archive/1/483698/100/0/threaded · Note
• http://vupen.com/english/advisories/2007/3848 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36805 · Note
• http://scanit.be/advisory-2007-11-14.html · Note
• http://securityreason.com/securityalert/3373 · Note
• http://us-cert.gov/cas/techalerts/TA07-317A.html · Note
• http://trusteer.com/docs/windowsdns.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395 · Note