CVE-2000-1218: Microsoft Windows 2000

Critical severity, CVSS 9.8. EPSS: 6.2% chance of exploitation in the next 30 days.

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.

Affected products

• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows 98: affected versions not specified
• Microsoft Windows 98se: affected versions not specified
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: affected versions not specified

Published 2000-04-14. Last modified 2026-06-16.