Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1033HistoryFeb 08, 2012 - 8:55 p.m.
CVE-2012-1033
2012-02-0820:55:00
Debian Security Bug Tracker
security-tracker.debian.org
15
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.5%
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a “ghost domain names” attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bind9 | < 1:9.8.1.dfsg.P1-4.1 | bind9_1:9.8.1.dfsg.P1-4.1_all.deb |
| Debian | 11 | all | bind9 | < 1:9.8.1.dfsg.P1-4.1 | bind9_1:9.8.1.dfsg.P1-4.1_all.deb |
| Debian | 10 | all | bind9 | < 1:9.8.1.dfsg.P1-4.1 | bind9_1:9.8.1.dfsg.P1-4.1_all.deb |
| Debian | 999 | all | bind9 | < 1:9.8.1.dfsg.P1-4.1 | bind9_1:9.8.1.dfsg.P1-4.1_all.deb |
| Debian | 13 | all | bind9 | < 1:9.8.1.dfsg.P1-4.1 | bind9_1:9.8.1.dfsg.P1-4.1_all.deb |
Related
nessus
nessus
HP-UX PHNE_43369 : s700_800 11.23 BIND 9.2.0 Revision 5.0
2012-12-21 00:00:00
openSUSE Security Update : bind (openSUSE-SU-2012:0863-1)
2014-06-13 00:00:00
F5 Networks BIG-IP : BIND vulnerability (SOL15481)
2014-10-10 00:00:00
f5
f5
SOL15481 - BIND vulnerability CVE-2012-1033
2014-08-07 00:00:00
K15481 : BIND vulnerability CVE-2012-1033
2014-08-29 00:00:00
veracode
veracode
Insecure Caching
2019-01-15 08:51:44
ubuntucve
ubuntucve
CVE-2012-1033
2012-02-08 00:00:00
cert
cert
ISC BIND 9 resolver cache vulnerability
2012-02-08 00:00:00
cve
cve
CVE-2012-1033
2012-02-08 20:55:00
seebug
seebug
ISC BIND安全限制绕过漏洞(CVE-2012-1033)
2012-02-09 00:00:00
prion
prion
Code injection
2012-02-08 20:55:00
openvas
openvas
ISC BIND Resolver Cache Vulnerability (Jan 2016)
2016-01-28 00:00:00
Oracle: Security Advisory (ELSA-2012-0716)
2015-10-06 00:00:00
Slackware Advisory SSA:2012-166-01 bind
2012-09-10 00:00:00
redhat
redhat
(RHSA-2012:0716) Important: bind security update
2012-06-07 00:00:00
(RHSA-2012:0717) Important: bind97 security update
2012-06-07 00:00:00
amazon
amazon
Important: bind
2012-06-10 11:47:00
slackware
slackware
[slackware-security] bind
2012-06-14 23:45:02
oraclelinux
oraclelinux
bind security update
2012-06-07 00:00:00
bind97 security update
2012-06-07 00:00:00
centos
centos
bind97 security update
2012-06-07 17:22:36
bind, caching security update
2012-06-07 17:23:50
ubuntu
ubuntu
Bind vulnerabilities
2012-06-05 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2012-09-24 00:00:00
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.5%
Related for DEBIANCVE:CVE-2012-1033