Vulnerability in Zeus Web Server

CVE-2010-0362

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.015 (71.1th percentile) — read the EPSS interpretation.

Affected products

Zeus Zeus_web_server — versions 3.3, 3.3.1, 3.3.2
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

UticaCollegeCyberSecurityClub/CCDC

References

cve@mitre.org (x_refsource_CONFIRM, Patch)

Frequently asked questions

What is CVE-2010-0362?: CVE-2010-0362 is a vulnerability in Zeus Web Server, classified under Cryptographic Issues. Published 2010-01-20.
Is CVE-2010-0362 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.