What’s Vulnerable › Vulnerabilities

CVE-2001-1452

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-04-21 · updated 2026-06-16
• Weakness: CWE-346

Description

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.

Affected products

• Microsoft Windows 2000: all versions
• Microsoft Windows Nt: 4.0

References

• http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352
• http://www.kb.cert.org/vuls/id/109475
• http://www.securityfocus.com/bid/6791
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3675
• http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352
• http://www.kb.cert.org/vuls/id/109475
• http://www.securityfocus.com/bid/6791
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3675

Get alerted when CVE-2001-1452 or the next vulnerability affects your stack