SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2000-1218

CRITICAL · CVSS 9.8 EPSS 6.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-04-14 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Microsoft, Windows. It may be remotely exploitable.

CVE
CVE-2000-1218
Severity
CRITICAL
CVSS
9.8
EPSS
6.09%
Microsoft Windows

Original NVD Description

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.