Vulnerability Description
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Server 2003 | All versions |
| Microsoft | Windows Server 2008 | All versions |
| Microsoft | Windows Xp | All versions |
References
- http://secunia.com/advisories/30925Vendor Advisory
- http://www.securityfocus.com/bid/30132Patch
- http://www.securitytracker.com/id?1020437
- http://www.us-cert.gov/cas/techalerts/TA08-190A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2019/referencesVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-03
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://secunia.com/advisories/30925Vendor Advisory
- http://www.securityfocus.com/bid/30132Patch
- http://www.securitytracker.com/id?1020437
- http://www.us-cert.gov/cas/techalerts/TA08-190A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2019/referencesVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-03
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
FAQ
What is CVE-2008-1454?
CVE-2008-1454 is a vulnerability with a CVSS score of 9.4 (HIGH). Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accep...
How severe is CVE-2008-1454?
CVE-2008-1454 has been rated HIGH with a CVSS base score of 9.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1454?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 2000, Microsoft Windows Server 2003, Microsoft Windows Server 2008, Microsoft Windows Xp.