The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.3 | MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-noinfo | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| http://osvdb.org/80192 | secalert@redhat.com | Broken Link |
| http://secunia.com/advisories/48492 | secalert@redhat.com | Third Party Advisory |
| http://www.maradns.org/changelog.html | secalert@redhat.com | Release Notes Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2012/03/20/1 | secalert@redhat.com | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2012/03/20/10 | secalert@redhat.com | Mailing List Third Party Advisory |
| http://www.securitytracker.com/id?1026821 | secalert@redhat.com | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=804770 | secalert@redhat.com | Issue Tracking Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 | secalert@redhat.com | Third Party Advisory VDB Entry |
| http://osvdb.org/80192 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/48492 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.maradns.org/changelog.html | af854a3a-2127-422b-91ae-364da2661108 | Release Notes Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2012/03/20/1 | af854a3a-2127-422b-91ae-364da2661108 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2012/03/20/10 | af854a3a-2127-422b-91ae-364da2661108 | Mailing List Third Party Advisory |
| http://www.securitytracker.com/id?1026821 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=804770 | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/74119 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |