CVE-2007-1644 | BDVDB-2026-23133 Detail

Description#

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle (MITM) attacks on web traffic, conduct pharming attacks by poisoning DNS records, and cause a denial of service (erroneous name resolution).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/43603
https://exchange.xforce.ibmcloud.com/vulnerabilities/33473
https://www.exploit-db.com/exploits/3544

Exploit#

https://www.exploit-db.com/exploits/3544

History#

Version 12007-03-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.