[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

112965

 
 

909

 
 

87888

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2009-0093Date: (C)2009-03-11   (M)2018-05-27


Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.5
Exploit Score: 6.8
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE_INSTANCE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1021830
BID-33989
SECUNIA-34217
OSVDB-52519
ADV-2009-0661
IAVM:2009-A-0018
MS09-008
TA09-069A
http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html
http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx
http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm

CPE    8
cpe:/o:microsoft:windows_2000::sp4
cpe:/o:microsoft:windows_server_2003::sp2:x64
cpe:/o:microsoft:windows_server_2003::sp2:itanium
cpe:/o:microsoft:windows_server_2008
...
CWE    1
CWE-20
OVAL    2
oval:org.secpod.oval:def:2620
oval:org.mitre.oval:def:6138

© SecPod Technologies