CVE-2007-3898
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses...
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
Exploit likelihood
What each source reports
NVD Score used
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
- Record
CVE-2007-3898- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
- Record
CVE-2007-3898- Updated
- 2026-11-02
EUVDEUVD-2007-3882 No score
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
- Record
EUVD-2007-3882- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5m49-9cvp-c8jj No score
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses...
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
- Record
GHSA-5m49-9cvp-c8jj- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Server 2000/2003 - Recursive DNS Spoofing (1) | 2007-11-13 |
| Exploit-DB | Microsoft Windows Server 2000/2003 - Recursive DNS Spoofing (2) | 2007-11-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3898 is a medium vulnerability (CVSS 6.4) in Microsoft Windows 2000, published November 14, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.3%, the 98th percentile. No source names a fixed version.
References
trusteer.com/docs/windowsdns.html
vupen.com/english/advisories/2007/3848
securityreason.com/securityalert/3373
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-062
secunia.com/advisories/27584
securityfocus.com/archive/1/484186/100/0/threaded
Show 11 moreShow less
us-cert.gov/cas/techalerts/TA07-317A.html
scanit.be/advisory-2007-11-14.html
kb.cert.org/vuls/id/484649
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395
exchange.xforce.ibmcloud.com/vulnerabilities/36805
securitytracker.com/id?1018942
nvd.nist.gov/vuln/detail/CVE-2007-3898
github.com/advisories/GHSA-5m49-9cvp-c8jj