CVE-2012-1570

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/80192Broken Link
http://secunia.com/advisories/48492Third Party Advisory
http://www.maradns.org/changelog.htmlRelease Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/20/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/03/20/10Mailing List, Third Party Advisory
http://www.securitytracker.com/id?1026821Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=804770Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74119Third Party Advisory, VDB Entry
http://osvdb.org/80192Broken Link
http://secunia.com/advisories/48492Third Party Advisory
http://www.maradns.org/changelog.htmlRelease Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/20/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/03/20/10Mailing List, Third Party Advisory
http://www.securitytracker.com/id?1026821Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=804770Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74119Third Party Advisory, VDB Entry

Timeline

Published: Mar 28, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-15716.5file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file t CVE-2012-15727.5OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space CVE-2012-15735.0gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, whi CVE-2012-15746.5The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, CVE-2012-15754.3Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via CVE-2012-15766.0The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not pro CVE-2012-15779.8lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.CVE-2012-15786.8Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers CVE-2012-15795.0The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript fil CVE-2012-15806.8Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote a CVE-2012-15815.0MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote CVE-2012-15824.3Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote att