http://www.trusteer.com/docs/windowsdns.html

VU#484649

25919

1018942

27584

http://www.scanit.be/advisory-2007-11-14.html

TA07-317A

3373

ADV-2007-3848

win-dns-spoof-information-disclosure(36805)

oval:org.mitre.oval:def:4395

MS07-062

HPSBST02291

20071114 Predictable DNS transaction IDs in Microsoft DNS Server

20071113 After 6 months - fix available for Microsoft DNS cache poisoning attack

According to its self-reported version number, the Microsoft DNS Server running on the remote host contains an issue with the entropy of transaction IDs that could allow an attacker to spoof DNS responses.  By exploiting this issue, an attacker may be able to redirect legitimate traffic from other systems that could allow him to construct more complex attacks.

The remote host has the Windows DNS server installed.

There is a flaw in the remote version of this server that could allow an attacker to spoof DNS responses.  By exploiting this flaw, an attacker may be able to redirect legitimate traffic from other systems that could allow him to construct more complex attacks.

ID	Name	Product	Family	Severity
72833	MS07-062: Vulnerability in DNS Could Allow Spoofing (941672) (uncredentialed check)	Nessus	DNS	medium
28184	MS07-062: Vulnerability in DNS Could Allow Spoofing (941672)	Nessus	Windows : Microsoft Bulletins	high

CVE-2007-3898

medium

Tenable Plugins

medium

high