CVE-2012-1194

medium · 6.4

The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

6.4

CVSS

10.6%

EPSS (exploit prob.)

96th

EPSS percentile

2012-02-17

Published

AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	windows_server_2008	<= -
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.isc.org/files/imce/ghostdomain_camera.pdf
https://www.isc.org/files/imce/ghostdomain_camera.pdf

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-1194