CVE-2008-1454
First published: Tue Jul 08 2008(Updated: )
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows Server | =sp1 | |
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows Server | =sp1 | |
| Microsoft Windows Server | =sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/30925
- http://www.securityfocus.com/bid/30132
- http://www.securitytracker.com/id?1020437
- http://www.us-cert.gov/cas/techalerts/TA08-190A.html
- http://www.vupen.com/english/advisories/2008/2019/references
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380
Frequently Asked Questions
What is the severity of CVE-2008-1454?
CVE-2008-1454 is considered a critical vulnerability due to its potential for DNS cache poisoning attacks.
How do I fix CVE-2008-1454?
To fix CVE-2008-1454, ensure that your system is updated with the latest security patches from Microsoft.
Which versions of Windows are affected by CVE-2008-1454?
CVE-2008-1454 affects Microsoft Windows 2000 SP4, Windows Server 2003 SP1 and SP2, and Windows Server 2008.
What type of attack can be exploited via CVE-2008-1454?
CVE-2008-1454 can be exploited to perform cache poisoning attacks on DNS.
What are the implications of CVE-2008-1454 for network security?
The implications of CVE-2008-1454 for network security include potential unauthorized access and manipulation of DNS records.
- agent/type
- agent/remedy
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- canonical/microsoft windows server
- version/microsoft windows server/sp1
- canonical/microsoft windows 2000
- version/microsoft windows 2000/sp4
- version/microsoft windows server/sp2