CVE-2007-1644

high · 10

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle (MITM) attacks on web traffic, conduct pharming attacks by poisoning DNS records, and cause a denial of service (erroneous name resolution).

CVSS

32.6%

EPSS (exploit prob.)

98th

EPSS percentile

2007-03-24

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	all_windows	abstract_cpe

Check a specific version with /api/v1/cve/match.

References

http://osvdb.org/43603
https://exchange.xforce.ibmcloud.com/vulnerabilities/33473
https://www.exploit-db.com/exploits/3544
http://osvdb.org/43603
https://exchange.xforce.ibmcloud.com/vulnerabilities/33473
https://www.exploit-db.com/exploits/3544

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-1644