{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a \"ghost domain names\" attack."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-02-17T22:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.isc.org/files/imce/ghostdomain_camera.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-1192", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a \"ghost domain names\" attack."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.isc.org/files/imce/ghostdomain_camera.pdf", "refsource": "MISC", "url": "https://www.isc.org/files/imce/ghostdomain_camera.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T18:53:36.387Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.isc.org/files/imce/ghostdomain_camera.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-1192", "datePublished": "2012-02-17T22:00:00Z", "dateReserved": "2012-02-17T00:00:00Z", "dateUpdated": "2024-09-16T18:08:20.003Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*", "matchCriteriaId": "02681D89-DD26-4581-94C0-CEA4C30E2249", "versionEndIncluding": "1.4.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7515192E-C07E-4399-85D0-2A1BC2F9B993", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*", "matchCriteriaId": "34D6D064-EA2B-4BA9-9D30-5A92DE178608", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*", "matchCriteriaId": "55FAC8A9-EF56-407C-BF10-41F7C768E30A", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*", "matchCriteriaId": "E302E40E-EA2F-4021-89BB-B6B9B6B995A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*", "matchCriteriaId": "E90F2613-9484-46DC-AE00-23F5E803771B", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*", "matchCriteriaId": "39CCA38F-6DFD-4506-BAE3-A587F1A1D017", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*", "matchCriteriaId": "10DD7299-6C4E-46EA-BAD8-FE8B868995A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*", "matchCriteriaId": "836ABCDF-C8DB-4485-B7AE-E03AA281DB69", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "3992786F-0848-497D-8BE2-924C57FF94ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "AD592895-AF66-4F27-A7FE-00C4FCC06BFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*", "matchCriteriaId": "0FA67BEE-E12C-4CEA-AFF0-008B0226B4A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.9:*:*:*:*:*:*:*", "matchCriteriaId": "D69B78C4-5ABE-46DF-9460-145818B75E5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*", "matchCriteriaId": "4D0C50E1-4234-452E-B172-9A5C180899F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*", "matchCriteriaId": "F81D9F43-8435-452A-8784-63BABA66BFA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A2A428BA-0BA7-4BBF-AC59-C14E5CCD5DCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "0344EB60-49BD-4F42-A123-E68D92D4357C", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "55620605-A826-45B6-A539-F93ACC6136F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "CCB47D47-ECBC-491F-B75D-0C59D292F030", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "D19FA146-0379-4FAD-ABD1-A5F74CEBEC4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "8E4D0493-2252-4A24-9541-7ABE1D09A594", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4123BEB8-8BE3-4A63-9EA2-1CD81F673F16", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "B2E809EF-3FE1-45A5-B6F5-0ADBA3DD1B54", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "43B6AF61-C55F-460B-AC6B-4736A49B9925", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "B3CEC475-F5E1-4663-BBDC-E7A0E8C4072E", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "96AA4EB6-096C-47C6-8363-3D5652D89E33", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "845BB2BD-4CEA-48DA-8FA4-CFB79DE03939", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "C9113AD4-25B3-40ED-80DB-5A4EC21AA1F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "9640A5D9-C1B3-49F1-AFAA-6D57066A2072", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "A6DC0896-75BA-4DD3-9B30-DFD531E4336E", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "1B2FDA5D-6F4F-4870-B229-FD48C663B8E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "58C6E245-8D36-43B7-B1B0-9B0B19C45EAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "0DB6BD03-BBBF-4AD9-9076-30B423A345E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "9728B9F3-4A4C-4332-9821-D82F81C2F4C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "27F18C3C-6E8B-46EF-8301-E3768F7AE739", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "0F238D5D-2E86-4F79-84ED-1822338AF65A", "vulnerable": true}, {"criteria": "cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "E0D54E5E-BF0E-46F3-BB3A-E0FC7F5B93A7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a \"ghost domain names\" attack."}, {"lang": "es", "value": "El resolver en Unbound anterior a v1.4.11 sobrescribe los nombres de cach\u00e9 del servidor y los valores TTL en los registros NS durante la tramitaci\u00f3n de una respuesta a una consulta de registro A, permitiendo a atacantes remotos provocar la resolubilidad continuada de nombres de dominio revocados a trav\u00e9s de un ataque de \"nombres de dominio fantasma\" (ghost domain names)"}], "id": "CVE-2012-1192", "lastModified": "2024-11-21T01:36:38.137", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-02-17T22:55:00.697", "references": [{"source": "cve@mitre.org", "url": "https://www.isc.org/files/imce/ghostdomain_camera.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.isc.org/files/imce/ghostdomain_camera.pdf"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}