NVD

Id
56038  
Name
CVE-2007-3898  
Description
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-11-13  
Modified Date
2011-03-07  
Seq
2007-3898  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285345 56038 CVE-2007-3898 oval:org.mitre.oval:def:4395  View
285346 56038 CVE-2007-3898 3373  View
285347 56038 CVE-2007-3898 VU#484649  View
285348 56038 CVE-2007-3898 MS07-062  View
285349 56038 CVE-2007-3898 http://www.scanit.be/advisory-2007-11-14.html  View
285350 56038 CVE-2007-3898 20071113 After 6 months - fix available for Microsoft DNS cache poisoning attack  View
285351 56038 CVE-2007-3898 20071114 Predictable DNS transaction IDs in Microsoft DNS Server  View
285352 56038 CVE-2007-3898 HPSBST02291  View
285353 56038 CVE-2007-3898 25919  View
285354 56038 CVE-2007-3898 1018942  View
285355 56038 CVE-2007-3898 http://www.trusteer.com/docs/windowsdns.html  View
285356 56038 CVE-2007-3898 TA07-317A  View
285357 56038 CVE-2007-3898 ADV-2007-3848  View
285358 56038 CVE-2007-3898 win-dns-spoof-information-disclosure(36805)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52260 JVNDB-2007-000950 Microsoft Windows の DNS サーバにおける DNS キャッシュ汚染の脆弱性 Microsoft Windows には DNS サーバにおいて、トランザクション ID を予測可能となり、結果的に DNS キャッシュ汚染となる脆弱性が存在します。 CVE-2007-3898 27253 CVE-2007-3898 56038 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000950.html 2007-11-13 2007-12-03 View