[security-alerts] FW: [SA27584] Microsoft Windows DNS Service Cache Poisoning Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

>
> ----------------------------------------------------------------------
>
> TITLE:
> Microsoft Windows DNS Service Cache Poisoning Vulnerability
>
> SECUNIA ADVISORY ID:
> SA27584
>
> VERIFY ADVISORY:
> http://secunia.com/advisories/27584/
>
> CRITICAL:
> Moderately critical
>
> IMPACT:
> Spoofing
>
> WHERE:
> From remote
>
> REVISION:
> 1.2 originally posted 2007-11-13
>
> OPERATING SYSTEM:
> Microsoft Windows Server 2003 Web Edition
> http://secunia.com/product/1176/
> Microsoft Windows Server 2003 Standard Edition
> http://secunia.com/product/1173/
> Microsoft Windows Server 2003 Enterprise Edition
> http://secunia.com/product/1174/
> Microsoft Windows Server 2003 Datacenter Edition
> http://secunia.com/product/1175/
> Microsoft Windows 2000 Server
> http://secunia.com/product/20/
> Microsoft Windows 2000 Datacenter Server
> http://secunia.com/product/1177/
> Microsoft Windows 2000 Advanced Server
> http://secunia.com/product/21/
>
> DESCRIPTION:
> A vulnerability has been reported in Microsoft Windows, which can be
> exploited by malicious people to poison the DNS cache.
>
> The vulnerability is caused due to the DNS service (dns.exe) using
> predictable transaction values when sending out queries to upstream
> DNS servers. This can be exploited to poison the DNS cache via a
> specially crafted DNS response with a guessed transaction value when
> the DNS server performs a recursive lookup.
>
> SOLUTION:
> Apply patches.
>
> Microsoft Windows 2000 Server SP4:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=c80fc
> d9b-d0f8-44db-96fc-bf2ead054ff4
>
> Windows Server 2003 SP1/SP2:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=ed8e2
> cb4-bcd9-40fc-9ad6-46b364d0656d
>
> Windows Server 2003 x64 Edition (optionally with SP2):
> http://www.microsoft.com/downloads/details.aspx?FamilyId=d1323
> e14-ffa7-4d03-a2a7-9240c192a75e
>
> Windows Server 2003 with SP1/SP2 for Itanium-based systems:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=f3ad6
> 7de-85ad-452d-a1e0-0af3faf969d6
>
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits:
> * Amit Klein, Trusteer.
> * Alla Berzroutchko, Scanit.
>
> CHANGELOG:
> 2007-11-14: Added link to US-CERT. Added link to Scanit.
>
> ORIGINAL ADVISORY:
> MS07-062 (KB941672):
> http://www.microsoft.com/technet/security/Bulletin/MS07-062.mspx
>
> Scanit:
> http://www.scanit.be/advisory-2007-11-14.html
>
> OTHER REFERENCES:
> US-CERT VU#484649:
> http://www.kb.cert.org/vuls/id/484649
>
>