CVE-2008-1454
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and...
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
- Record
CVE-2008-1454- CVSS 2.0
- 9.4 High
AV:N/AC:L/Au:N/C:N/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
- Record
CVE-2008-1454- Updated
- 2026-11-02
EUVDEUVD-2008-1458 No score
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
- Record
EUVD-2008-1458- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vrc4-g858-6v5j No score
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and...
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447.
- Record
GHSA-vrc4-g858-6v5j- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1454 is a high vulnerability (CVSS 9.4) in Microsoft Windows 2000, published July 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 34.1%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1020437
secunia.com/advisories/30925
securityfocus.com/bid/30132
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380
us-cert.gov/cas/techalerts/TA08-190A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037
vupen.com/english/advisories/2008/2019/references
nvd.nist.gov/vuln/detail/CVE-2008-1454
github.com/advisories/GHSA-vrc4-g858-6v5j