PT-2012-3348 · Maradns · Maradns

Vincent Danen · Publicado 2012-03-28 · Atualizado 2020-08-14 · CVE-2012-1570

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MaraDNS versions prior to 1.3.0.7.15 MaraDNS versions 1.4.x prior to 1.4.12

Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the resolver overwrites cached server names and TTL values in NS records during the processing of a response to an A record query.

Recommendations For MaraDNS versions prior to 1.3.0.7.15, update to version 1.3.0.7.15 or later. For MaraDNS versions 1.4.x prior to 1.4.12, update to version 1.4.12 or later.

Correção

Identificadores relacionados

CVE-2012-1570

Produtos afetados

Maradns

Referências · 12

• https://security-tracker.debian.org/tracker/CVE-2012-1570 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=804770 · Nota
• http://osvdb.org/80192 · Nota
• http://secunia.com/advisories/48492 · Nota
• http://openwall.com/lists/oss-security/2012/03/20/1 · Nota
• http://maradns.org/changelog.html · Aviso do Fabricante
• http://securitytracker.com/id?1026821 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 · Nota
• https://osv.dev/vulnerability/CVE-2012-1570 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/03/20/10 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1570 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1570 · Aviso do Fabricante