PT-2009-2908 · Microsoft · Windows Dns Server+3

Dave Dagon + 1 · Published 2009-03-11 · Updated 2019-02-26 · CVE-2009-0233

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows DNS Server versions in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008

Description The issue concerns the DNS Resolver Cache Service in Windows DNS Server. When dynamic updates are enabled, the service does not properly reuse cached DNS responses, making it easier for remote attackers to predict transaction IDs and poison caches. This can be achieved by simultaneously sending crafted DNS queries and responses.

Recommendations For Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, consider disabling dynamic updates until a patch is available to prevent cache poisoning attacks. Restrict access to the DNS Server to minimize the risk of exploitation. Avoid using the DNS Resolver Cache Service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0233

Affected Products

Windows 2000

Windows Dns Server

Windows Server 2003

Windows Server 2008

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2009-0233 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008 · Vendor Advisory
• http://securityfocus.com/bid/33982 · Note
• http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx · Note
• http://us-cert.gov/cas/techalerts/TA09-069A.html · Note
• http://osvdb.org/52517 · Note
• http://secunia.com/advisories/34217 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6228 · Note
• http://vupen.com/english/advisories/2009/0661 · Note
• http://securitytracker.com/id?1021831 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm · Note