CVE-2010-0362

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses

published January 20, 2010

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01470 · 73.4th percentile
Published
2010-01-20T16:00Z
EPSS history
Timeline
  • 20 JAN 16:00Z
    Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses
    cvelistv5