Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2001-1452

EPSS 4.03% · P89
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2001-1452

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows DNS资源记录缓冲破坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows是微软开发和维护的流行的视窗操作系统。 Microsoft Windows在'glue'记录缓冲处理上存在漏洞，远程攻击者可以利用这个漏洞进行DNS欺骗，使客户端连接不可预料的恶意站点。 Windows NT和Windows 2000操作系统上的DNS服务程序在处理'glue'记录缓冲时存在问题，默认情况下从非委派名字服务器上接收到的'glue'记录会被缓冲，这就允许恶意服务器使用伪造的DNS应答来响应合法的查询，客户端机器接收到不正确的DNS记录，可导致用户被定向到不可
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2001-1452

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-1452

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-04-21 · 83 CVEs total

CVE-2001-1467expect漏洞
CVE-2003-1132Cisco Content Service Switch (CSS) DNS服务器拒绝服务漏洞
CVE-2001-1464Crystal Reports密码获得漏洞
CVE-2001-1465SurfControl SuperScout绕过过滤漏洞
CVE-2001-1463SolarWinds Serv-U File Server 加密问题漏洞
CVE-2001-1460PostNuke未认证的用户登录漏洞
CVE-2001-1459OpenSSH PAM会话逃避漏洞
CVE-2001-1458Novell Groupwise任意文件取回漏洞
CVE-2001-1457CrazyWWWBoard缓冲区溢出漏洞
CVE-2001-1461RSA SecurID WebID Unicode目录遍历漏洞
CVE-2001-1466VanDyke SecureCRT缓冲区溢出漏洞
CVE-2001-1468phpSecurePages包括文件任意命令执行漏洞
CVE-2001-1469SSH1 RC4消息修改漏洞
CVE-2001-1470SSH1 IDEA密码无侦查块修改漏洞
CVE-2001-1471phpBB Page Header远程任意命令执行漏洞
CVE-2001-1472PHPBB远程SQL注入操作漏洞
CVE-2001-1473SSH-1协议私钥计算漏洞
CVE-2001-1474SSH连接重定向漏洞
CVE-2001-1475SSH消息重放漏洞
CVE-2001-1476SSH用户密码猜测漏洞

Showing top 20 of 83 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-1452

No comments yet

Leave a comment