VDB
GHSA-vrc4-g858-6v5j
GHSA-vrc4-g858-6v5j
PUBLISHED
Record from GitHub Advisory Database · Published May 1, 2022
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
Timeline
- May 1, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-vrc4-g858-6v5j
vulnetix vdb fixes GHSA-vrc4-g858-6v5j
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-vrc4-g858-6v5j/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://www.vupen.com/english/advisories/2008/2019/references url
- http://secunia.com/advisories/30925 url
- https://nvd.nist.gov/vuln/detail/CVE-2008-1454 advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380 url
- http://www.securityfocus.com/bid/30132 url
- http://www.securitytracker.com/id?1020437 url
- http://www.us-cert.gov/cas/techalerts/TA08-190A.html url
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037 advisory