Test ID:	1.3.6.1.4.1.25623.1.0.801701
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows DNS Client Service Response Spoofing Vulnerability (945553)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS08-020.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS08-020. Vulnerability Insight: The flaws are due to the Windows DNS client using predictable transaction IDs in outgoing queries and can be exploited to poison the DNS cache when the transaction ID is guessed. Vulnerability Impact: Successful exploitation could allow remote attackers to spoof DNS replies, allowing them to redirect network traffic and to launch man-in-the-middle attacks. Affected Software/OS: Microsoft Windows 2K/XP/2003/Vista. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 8.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C
Cross-Ref:	BugTraq ID: 28553 Common Vulnerability Exposure (CVE) ID: CVE-2008-0087 http://www.securityfocus.com/bid/28553 Bugtraq: 20080408 Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) (Google Search) http://www.securityfocus.com/archive/1/490575/100/0/threaded Cert/CC Advisory: TA08-099A http://www.us-cert.gov/cas/techalerts/TA08-099A.html HPdes Security Advisory: HPSBST02329 http://marc.info/?l=bugtraq&m=120845064910729&w=2 HPdes Security Advisory: SSRT080048 http://www.trusteer.com/docs/windowsresolver.html Microsoft Security Bulletin: MS08-020 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-020 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5314 http://www.securitytracker.com/id?1019802 http://secunia.com/advisories/29696 http://www.vupen.com/english/advisories/2008/1144/references
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.