CoreCVE
Back

CRITICAL

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache

Published Apr 21, 2005

Description

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-346

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 21, 2005
Updated Aug 8, 2024
Reserved Apr 21, 2005
Link CVE-2000-1218
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2000-1218
Red Hat
Severity n/a
Public date n/a
Links CVE-2000-1218