CVE-2000-1218

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 14, 2000
Updated: Nov 20, 2024
CWE ID 346

Summary

CVE-2000-1218 is a vulnerability affecting Microsoft Windows 98, NT 4.0, 2000, and XP. The default configuration for these operating systems' domain name resolver sets the QueryIpMatching parameter to 0, allowing remote attackers to update DNS information for domains that the affected system did not query. This can lead to DNS cache poisoning, potentially redirecting users to fraudulent websites or disrupting network communication.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows NT
  • Microsoft Windows XP
  • Microsoft Windows 2000
  • Microsoft Windows 98 Plus Pack

Affected Vendors

  • Microsoft