PT-2012-3348 · Maradns · Maradns

Vincent Danen · Published 2012-03-28 · Updated 2020-08-14 · CVE-2012-1570

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MaraDNS versions prior to 1.3.0.7.15 MaraDNS versions 1.4.x prior to 1.4.12

Description The issue allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. This occurs because the resolver overwrites cached server names and TTL values in NS records during the processing of a response to an A record query.

Recommendations For MaraDNS versions prior to 1.3.0.7.15, update to version 1.3.0.7.15 or later. For MaraDNS versions 1.4.x prior to 1.4.12, update to version 1.4.12 or later.

Fix

Related Identifiers

CVE-2012-1570

Affected Products

Maradns

References · 12

• https://security-tracker.debian.org/tracker/CVE-2012-1570 · Vendor Advisory
• http://maradns.org/changelog.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-1570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1570 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1570 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=804770 · Note
• http://osvdb.org/80192 · Note
• http://secunia.com/advisories/48492 · Note
• http://openwall.com/lists/oss-security/2012/03/20/1 · Note
• http://securitytracker.com/id?1026821 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 · Note
• http://openwall.com/lists/oss-security/2012/03/20/10 · Note