Microsoft Windows DNS server and DNS client DNS reply spoofing updated since 14.11.2007
Published:		09.07.2008
Source:		MICROSOFT
SecurityVulns ID:		8336
Type:		remote
Level:		6/10
Description:		Weak pseudo-random generator is used to generate DNS request ID.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
CVE:		CVE-2008-1454
		CVE-2008-1447
		CVE-2008-0087
		CVE-2007-3898

Original document		MICROSOFT, Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230) (09.07.2008)
		Amit Klein, Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) (08.04.2008)
		MICROSOFT, Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing (945553) (08.04.2008)
		Alla Bezroutchko, [Full-disclosure] Predictable DNS transaction IDs in Microsoft DNS Server (14.11.2007)
		Amit Klein, After 6 months - fix available for Microsoft DNS cache poisoning attack (14.11.2007)
		MICROSOFT, Microsoft Security Bulletin MS07-062 – Important Vulnerability in DNS Could Allow Spoofing (941672) (14.11.2007)

Files:		program for DNS id spoofing
		Microsoft Security Bulletin MS07-062 – Important Vulnerability in DNS Could Allow Spoofing (941672)
		Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing (945553)
		Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)
Discuss:		Read or add your comments to this news (0 comments)