CVE-2000-0335
Published May 3, 2000
Last updated 16 years ago
Overview
- Description
- The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5C0577C-6BC7-418F-B2C5-B74800D43418"
},
{
"criteria": "cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E2A0F12-FD00-40B9-86AD-7D082385E5DB"
},
{
"criteria": "cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ED8F0E8-A969-4F7F-A100-662F4A5426FD"
},
{
"criteria": "cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE582B8F-4E31-4D0F-B2F9-AC83C855F751"
},
{
"criteria": "cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB56D9C9-13B3-418C-B06C-0997E165F1C7"
},
{
"criteria": "cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"
},
{
"criteria": "cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93BB48F5-A635-402E-AE7F-B8AB90ED0C70"
},
{
"criteria": "cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5FE281A-610F-42CA-B741-53F2D70A3F38"
}
],
"operator": "OR"
}
]
}
]