CVE-2012-1193

The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
powerdnspowerdns_recursor
3.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pdns-recursor
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
References
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102729.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104173.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html
https://www.isc.org/files/imce/ghostdomain_camera.pdf
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102729.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104173.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html
https://www.isc.org/files/imce/ghostdomain_camera.pdf