CVE-2000-1218
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, allowing Windows to accept DNS updates from hosts that it did not query. This enables remote attackers to poison the DNS cache.
Risk Assessment
Attackers can exploit this vulnerability to maliciously modify the DNS cache, potentially redirecting users to fraudulent websites.
Recommendation
It is recommended to change the default configuration of the QueryIpMatching parameter to 1 to restrict the acceptance of unauthorized DNS updates.
Original NVD description (English source)
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.