Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows DNS/WINS服务器多个欺骗漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows WINS服务器没有正确地验证哪些用户可以注册WPAD或ISATAP项，远程攻击者可以通过在执行预期IP地址的WINS服务器中注册WPAD或ISATP执行中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A