Lucene search

[email protected]CVE-2012-1194

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-1194

2022-10-0316:15:27

[email protected]

web.nvd.nist.gov

cve-2012-1194

dns server

microsoft

windows server 2008

security vulnerability

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a “ghost domain names” attack.

Affected configurations

NVD

Node

microsoftwindows_server_2008Range≤-sp2

microsoftwindows_server_2008Match-

microsoftwindows_server_2008Match-gold

CPENameOperatorVersion
microsoft:windows_server_2008microsoft windows server 2008le-

CPE	Name	Operator	Version
microsoft:windows_server_2008	microsoft windows server 2008	le	-

References

www.isc.org/files/imce/ghostdomain_camera.pdf

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

Related for CVE-2012-1194

cvelist1 prion1 nvd1