CVE-2001-1452

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352 Broken Link Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/109475 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/6791 Broken Link Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3675 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
History

08 Feb 2024, 20:47

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*		 cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
References () http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352 - () http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352 - Broken Link, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/6791 - Vendor Advisory () http://www.securityfocus.com/bid/6791 - Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/3675 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/3675 - Third Party Advisory, VDB Entry
CWE NVD-CWE-Other CWE-346
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://support.microsoft.com/default.aspx?scid=KB;en-us;q241352', 'name': 'Q241352', 'tags': ['Vendor Advisory'], 'refsource': 'MSKB'}
  • () http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352 -
Information

Published : 2001-08-31 04:00

Updated : 2024-02-08 20:47

NVD link : CVE-2001-1452

Mitre link : CVE-2001-1452

CVE.ORG link : CVE-2001-1452

JSON object : View

Products Affected

microsoft

  • windows_2000
  • windows_nt
CWE
CWE-346

Origin Validation Error