Published: 24/03/2007 Updated: 11/10/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote malicious users to change DNS records for a web proxy server and conduct man-in-the-middle (MITM) attacks on web traffic, conduct pharming attacks by poisoning DNS records, and cause a denial of service (erroneous name resolution).

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft all windows abstract_cpe

/* Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres Tarasco Acuña - (c) 2007 Url: www514es By default, most Microsoft DNS servers integrated with active directory allow insecure dynamic updates for dns records This feature allows remote users to create, change and delete DNS records There are several attack scena ...

NVD-CWE-Other http://osvdb.org/43603 https://exchange.xforce.ibmcloud.com/vulnerabilities/33473 https://www.exploit-db.com/exploits/3544 https://nvd.nist.gov https://www.exploit-db.com/exploits/3544/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1644

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect