CVE

Id
54276  
CVE No.
CVE-2012-1033  
Status
Candidate  
Description
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.  
Phase
Assigned (20120207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570308 54276 CVE-2012-1033 CONFIRM:https://www.isc.org/software/bind/advisories/cve-2012-1033  View
570309 54276 CVE-2012-1033 HP:HPSBUX02835  View
570310 54276 CVE-2012-1033 URL:http://marc.info/?l=bugtraq&m=135638082529878&w=2  View
570311 54276 CVE-2012-1033 HP:SSRT100763  View
570312 54276 CVE-2012-1033 URL:http://marc.info/?l=bugtraq&m=135638082529878&w=2  View
570313 54276 CVE-2012-1033 SUSE:openSUSE-SU-2012:0863  View
570314 54276 CVE-2012-1033 URL:https://hermes.opensuse.org/messages/15136456  View
570315 54276 CVE-2012-1033 SUSE:openSUSE-SU-2012:0864  View
570316 54276 CVE-2012-1033 URL:https://hermes.opensuse.org/messages/15136477  View
570317 54276 CVE-2012-1033 CERT-VN:VU#542123  View
570318 54276 CVE-2012-1033 URL:http://www.kb.cert.org/vuls/id/542123  View
570319 54276 CVE-2012-1033 BID:51898  View
570320 54276 CVE-2012-1033 URL:http://www.securityfocus.com/bid/51898  View
570321 54276 CVE-2012-1033 OSVDB:78916  View
570322 54276 CVE-2012-1033 URL:http://osvdb.org/78916  View
570323 54276 CVE-2012-1033 SECTRACK:1026647  View
570324 54276 CVE-2012-1033 URL:http://www.securitytracker.com/id?1026647  View
570325 54276 CVE-2012-1033 SECUNIA:47884  View
570326 54276 CVE-2012-1033 URL:http://secunia.com/advisories/47884  View
570327 54276 CVE-2012-1033 XF:isc-bind-update-sec-bypass(73053)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30270 JVNDB-2012-005977 Juniper Networks Mobility System Software におけるクロスサイトスクリプティングの脆弱性 Juniper Networks Mobility System Software (MSS) の WebAAA ログイン機能 (wba_login.html) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1038 54276 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005977.html  View