Microsoft Windows DNS Client Predictable Transaction ID Vulnerability - Secunia Advisories - Vulnerability Intelligence

Microsoft Windows DNS Client Predictable Transaction ID Vulnerability
Secunia Advisory:	SA29696	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-04-08
Last Update:	2008-04-10
Popularity:	5,737 views

Critical:	Moderately critical
Impact:	Spoofing
Where:	From remote
Solution Status:	Vendor Patch

OS:	Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Server Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Vista Microsoft Windows XP Home Edition Microsoft Windows XP Professional

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2008-0087

Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to poison the DNS cache. The vulnerability is caused due to the Windows DNS client using predictable transaction IDs in outgoing queries and can be exploited to poison the DNS cache when the transaction ID is guessed. Solution: Apply patches. Windows 2000 SP4: http://www.microsoft.com/downloads/de...=41326ade-96b6-47ce-9291-d4e3039471c4 Windows XP SP2: http://www.microsoft.com/downloads/de...=893f4cef-0395-4c44-ba28-7a10b6e7dd48 Windows XP Professional x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/de...=8fdd1207-6e93-4c43-bacc-fe3623a6ebe7 Windows Server 2003 SP1/SP2: http://www.microsoft.com/downloads/de...=214bd8f5-6eb2-414c-b013-c516a306d692 Windows Server 2003 x64 Edition (optionally with SP2): http://www.microsoft.com/downloads/de...=fd123394-a5d6-4b55-be74-2938f52ce922 Windows Server 2003 with SP1/SP2 for Itanium-based systems: http://www.microsoft.com/downloads/de...=e0e63f03-904d-47ee-94fc-51a8dea668eb Windows Vista: http://www.microsoft.com/downloads/de...=8203d303-c855-4579-9bbf-b06ddf5c1b87 Windows Vista x64 Edition: http://www.microsoft.com/downloads/de...=73f3a234-3973-4467-be7e-69efa7ee978c Provided and/or discovered by: The vendor credits: * Amit Klein of Trusteer * Alla Berzroutchko of Scanit * Roy Arends of Nominet UK Changelog: 2008-04-10: Added additional link. Original Advisory: MS08-020 (945553): http://www.microsoft.com/technet/security/Bulletin/MS08-020.mspx Amit Klein, Trusteer: http://www.trusteer.com/docs/Microsoft_Windows_resolver_DNS_cache_poisoning.pdf

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	24
New vulnerabilities:	48
Updated advisories:	34

Highly // 200 views

Alex Multiple Products File Upload Vulnerability

Moderately // 195 views

ClipShare "chid" SQL Injection Vulnerability

Moderately // 199 views

MauryCMS "c" SQL Injection Vulnerability

Less // 230 views

MyTopix "send" SQL Injection Vulnerability

Less // 257 views

MailScanner "trend-autoupdate" Insecure Temporary Files

Not // 226 views

P3nfs Insecure Temporary Files

Less // 256 views

pam_mount "passwdehd" Insecure Temporary Files

Less // 245 views

refbase "headerMsg" Cross-Site Scripting Vulnerability

Highly // 308 views

imlib2 XPM Processing Buffer Overflow Vulnerability

Less // 252 views

SystemImager "si_mkbootserver" Insecure Temporary Files

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.