First published: Tue Jul 08 2008(Updated: )
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | =sp2 | |
Microsoft Windows Server 2003 | =sp1 | |
Microsoft Windows 2000 | =sp4 | |
Microsoft Windows Server 2003 | =sp1 | |
Microsoft Windows Server 2003 | =sp1 | |
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2003 | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-1454 is considered a critical vulnerability due to its potential for DNS cache poisoning attacks.
To fix CVE-2008-1454, ensure that your system is updated with the latest security patches from Microsoft.
CVE-2008-1454 affects Microsoft Windows 2000 SP4, Windows Server 2003 SP1 and SP2, and Windows Server 2008.
CVE-2008-1454 can be exploited to perform cache poisoning attacks on DNS.
The implications of CVE-2008-1454 for network security include potential unauthorized access and manipulation of DNS records.