CVE-2001-1452: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 9.4% chance of exploitation in the next 30 days.

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.

Affected products

• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows Nt: version 4.0 only

Published 2001-08-31. Last modified 2026-06-16.