Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)

  1. Network Vulnerabilities
  2. Windows : Microsoft Bulletins
  3. Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)
Summary
This host is missing a critical security update according to Microsoft Bulletin MS08-020.
Impact
Successful exploitation could allow remote attackers to spoof DNS replies, allowing them to redirect network traffic and to launch man-in-the-middle attacks. Impact Level: System
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link. http://www.microsoft.com/technet/security/bulletin/ms08-020.mspx
Insight
The flaws are due to the Windows DNS client using predictable transaction IDs in outgoing queries and can be exploited to poison the DNS cache when the transaction ID is guessed.
Affected
Microsoft Windows 2K/XP/2003/Vista
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities