CVE-2012-1033 in BIND
Zusammenfassung (Englisch)
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
07.02.2012
Veröffentlichung
08.02.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 4603 | ISC BIND Domain Name Resolver erweiterte Rechte | 269 | Proof-of-Concept | Offizieller Fix | CVE-2012-1033 |