Test ID:	1.3.6.1.4.1.25623.1.0.900108
Category:	Windows
Title:	Microsoft Windows NSlookup.exe RCE Vulnerability
Summary:	Windows XP SP2 is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Windows XP SP2 is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw is due to an unspecified error in 'NSlookup.exe' file, which could be exploited by attackers. Vulnerability Impact: Successful exploitation causes remote code execution, and Denial-of-Service. Affected Software/OS: Microsoft Windows 2K and XP. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3648 BugTraq ID: 30636 http://www.securityfocus.com/bid/30636 http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt http://www.nullcode.com.ar/ncs/crash/nsloo.htm http://www.securitytracker.com/id?1020711 XForce ISS Database: win-nslookup-code-execution(44423) https://exchange.xforce.ibmcloud.com/vulnerabilities/44423
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.