CVE-2009-0093

Published: Mar 11, 2009Modified: Apr 23, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka "DNS Server Vulnerability in WPAD Registration Vulnerability," a related issue to CVE-2007-1692.

Affected (7)

Products: Microsoft: Windows 2000, Windows Server 2003, Windows Server 2008

3 products

Windows Server 2003

Windows Server 2008

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html

Source: secure@microsoft.com

http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx

Source: secure@microsoft.com

http://osvdb.org/52519

Source: secure@microsoft.com

http://secunia.com/advisories/34217

Source: secure@microsoft.com

http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm

Source: secure@microsoft.com

http://www.securityfocus.com/bid/33989

Source: secure@microsoft.com

http://www.securitytracker.com/id?1021830

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA09-069A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2009/0661

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138

Source: secure@microsoft.com

http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/52519

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34217

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33989

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021830

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA09-069A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2009/0661

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.