CVE-2008-0087: High severity microsoft windows 2000 vulnerability
Published Apr 8, 2008
·Updated
The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.
Affected Software
14 affected components
Microsoft Windows 2000=sp4
Microsoft Windows Vista
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=sp2
Microsoft Windows Vista
Microsoft Windows-nt=xp-sp2
Microsoft Windows 2000=sp4
Microsoft Windows Server 2003=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows XP
Microsoft Windows XP=sp2
Microsoft Windows XP=sp2
Remediation
Patch Available
Event History
Apr 8, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0087?
CVE-2008-0087 is classified as a high-severity vulnerability due to its potential for DNS spoofing attacks.
2
How do I fix CVE-2008-0087?
To mitigate CVE-2008-0087, you should apply the latest security updates and patches provided by Microsoft for affected Windows versions.
3
Which systems are affected by CVE-2008-0087?
CVE-2008-0087 affects Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista.
4
What kind of attacks can exploit CVE-2008-0087?
CVE-2008-0087 allows remote attackers to perform DNS spoofing, which can redirect users to malicious sites.
5
Is there a workaround for CVE-2008-0087?
As a temporary workaround for CVE-2008-0087, consider using alternative DNS services to mitigate potential exploitation.