Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2008-1454 | First vendor Publication | 2008-07-08 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.4 | Attack Range | Network |
| Cvss Impact Score | 9.2 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1454 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:5380 | |||
| Oval ID: | oval:org.mitre.oval:def:5380 | ||
| Title: | DNS Cache Poisoning Vulnerability | ||
| Description: | Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2008-1454 | Version: | 3 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 1 | |
| Os | 4 | |
| Os | 2 | |
| Os | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-08-22 | Name : Vulnerabilities in DNS Could Allow Spoofing (953230) File : nvt/secpod_ms08-037_900005.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 46778 | Microsoft Windows DNS Query ID Field Prediction Cache Poisoning Microsoft Windows contains a flaw that may allow a malicious user to insert invalid records into a recursive DNS server cache. The issue is triggered by a flaw in the DNS protocol, which does not require sufficient randomness in selecting Query ID and UDP source port for queries to authoritative servers. It is possible that the flaw may allow an attacker to spoof a DNS response to a legitimate query resulting in a loss of integrity. |
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2008-07-17 | IAVM : 2008-A-0045 - DNS Protocol Cache Poisoning Vulnerability Severity : Category I - VMSKEY : V0016170 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Windows DNS server spoofing attempt RuleID : 16206 - Revision : 12 - Type : OS-WINDOWS |
| 2014-01-10 | dns root nameserver poisoning attempt RuleID : 13887 - Revision : 12 - Type : PROTOCOL-DNS |
| 2014-01-10 | dns cache poisoning attempt RuleID : 13667 - Revision : 19 - Type : PROTOCOL-DNS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-03-05 | Name : The DNS server running on the remote host is vulnerable to DNS spoofing attacks. File : ms_dns_kb951746.nasl - Type : ACT_GATHER_INFO |
| 2008-07-08 | Name : The remote host is vulnerable to DNS spoofing attacks. File : smb_nt_ms08-037.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:13:58 |
|
| 2024-11-28 12:15:15 |
|
| 2021-05-04 12:07:19 |
|
| 2021-04-22 01:07:43 |
|
| 2020-05-23 00:21:29 |
|
| 2019-02-26 17:19:30 |
|
| 2018-10-13 00:22:40 |
|
| 2017-09-29 09:23:28 |
|
| 2016-09-01 01:01:11 |
|
| 2016-06-28 17:13:00 |
|
| 2016-04-26 17:14:59 |
|
| 2014-03-06 13:21:22 |
|
| 2014-02-17 10:44:23 |
|
| 2014-01-19 21:24:54 |
|
| 2013-05-11 00:13:18 |
|
