9.8crit
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
6.2%
percentile 94%
Public exploits
0
none known
Summary
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
Exploit prediction (EPSS)
6.21% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-346 Origin Validation Error
References
- exchange.xforce.ibmcloud.com /vulnerabilities/4280 · vdb-entry, x_refsource_XF, x_transferred
- kb.cert.org /vuls/id/458659 · third-party-advisory, x_refsource_CERT-VN, x_transferred
Sources
- CVE List: CVE-2000-1218
- NVD: CVE-2000-1218
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.