CVEvulnerability
CVE-2007-3898
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-16
Description
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows server 2003
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/27584 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3373 securityreason.com
- http://www.kb.cert.org/vuls/id/484649 US Government Resource
- http://www.scanit.be/advisory-2007-11-14.html www.scanit.be
- http://www.securityfocus.com/archive/1/483635/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/483698/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/484186/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25919 Exploit, Patch
- http://www.securitytracker.com/id?1018942 www.securitytracker.com
- http://www.trusteer.com/docs/windowsdns.html www.trusteer.com
- http://www.us-cert.gov/cas/techalerts/TA07-317A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/3848 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-062 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36805 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395 oval.cisecurity.org
- http://secunia.com/advisories/27584 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3373 securityreason.com
- http://www.kb.cert.org/vuls/id/484649 US Government Resource
- http://www.scanit.be/advisory-2007-11-14.html www.scanit.be
- http://www.securityfocus.com/archive/1/483635/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/483698/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/484186/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25919 Exploit, Patch
- http://www.securitytracker.com/id?1018942 www.securitytracker.com
- http://www.trusteer.com/docs/windowsdns.html www.trusteer.com
- http://www.us-cert.gov/cas/techalerts/TA07-317A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/3848 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-062 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36805 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395 oval.cisecurity.org