CVE-2012-1033

bind: deleted domain name resolving flaw

Published Feb 8, 2012 CVSS 2.0 · 5.0 Medium EPSS 13.1% KEV · Not listed
Description
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-1071 The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Ubuntu USN Ubuntu USN USN-1462-1 Bind vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00673}

epss

{'score': 0.00985}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 6:45 PM
Reserved
Feb 7, 2012, 12:00 AM
Status
Modified
Published
Feb 8, 2012, 8:55 PM
Modified
Jun 16, 2026, 11:38 PM
Severity
Low
Public date
Feb 7, 2012, 12:00 AM