PT-2010-2148 · Zeus · Zeus Web Server

Published 2010-01-20 · Updated 2011-05-06 · CVE-2010-0362

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zeus Web Server versions prior to 4.3r5

Description The issue makes it easier for remote attackers to spoof DNS responses due to the lack of random transaction IDs for DNS requests.

Recommendations For Zeus Web Server versions prior to 4.3r5, update to version 4.3r5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2010-0362

Affected Products

Zeus Web Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-0362 · Security Note
• http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0362 · Note