CVE-2001-1452: High severity Microsoft Windows 2000 vulnerability
Published Aug 31, 2001
·Updated
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.
Affected Software
26 affected components
Microsoft Windows 2000
Microsoft Windows NT=4.0
Microsoft Windows 2000
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Remediation
Event History
Aug 31, 2001
CVE Published
via NVD·04:00 AM
Apr 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1452?
CVE-2001-1452 is considered a critical vulnerability due to its potential for DNS cache poisoning.
2
How do I fix CVE-2001-1452?
To mitigate CVE-2001-1452, apply the latest patches available for Windows NT 4.0 and Windows 2000 Server from Microsoft.
3
What systems are affected by CVE-2001-1452?
CVE-2001-1452 affects Windows NT 4.0 and Windows 2000 Server operating systems.
4
What is DNS cache poisoning as related to CVE-2001-1452?
DNS cache poisoning in CVE-2001-1452 refers to an attack where an attacker can insert spoofed DNS responses into a server's cache.
5
Can CVE-2001-1452 lead to further attacks?
Yes, if successfully exploited, CVE-2001-1452 can allow attackers to redirect users to malicious sites.