MS09-008: Vulnerabilities in DNS and WINS Server Could Allow Spoofing (962238)
Medium Nessus Plugin ID 35824
SynopsisThe remote host is vulnerable to DNS and/or WINS spoofing attacks.
DescriptionThe remote host has a Windows DNS server and/or a Windows WINS server installed.
Multiple vulnerabilities in the way that Windows DNS servers cache and validate queries as well as the way that Windows DNS servers and Windows WINS servers handle WPAD and ISATAP registration may allow remote attackers to redirect network traffic intended for systems on the Internet to the attacker's own systems.
SolutionMicrosoft has released a set of patches for Windows 2000, 2003 and 2008.