VULNERABILITY INTELLIGENCE

CVE-2000-1218

CVSS score9.8 CRITICAL

EPSS probability6.21%

CISA KEVNot currently listed

Published2000-04-14

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Weakness classification

CWE-346: Origin Validation Error

Primary references

cve@mitre.org — Third Party Advisory, US Government Resource
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry