CVE-2010-0362 - CVE House
Back to Database
Status published Medium CVE-2010-0362

Zeus Web Server before 4.3r5 does not use random transaction...

Vulnerability Description

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0362

Credits & Attribution

No credits recorded in the NVD database.

References

More from zeus

View All →
CVE-2010-0363
Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5,...
Low 2.6
CVE-2010-0359
Buffer overflow in the SSLv2 support in Zeus Web Server...
Critical 10

Affected Vendor

Affected Software

zeus web server
Vulnerable Versions:
0, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.3.7, 3.3.8, 3.4, 4.1, 4.2, 4.3

Timeline

Official Publish: January 20th, 2010
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.