CVE-2000-1218

Published: 2000-04-14

Description

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Severity

Overall Severity: CRITICAL

CVSS Metrics

Type Score Severity Vector
CVSS v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

microsoft - windows_2000

Affected Versions:

microsoft - windows_98

Affected Versions:

microsoft - windows_98se

Affected Versions:

microsoft - windows_nt

Affected Versions:

microsoft - windows_xp

Affected Versions:

References

Neural Processor Active