CVE-2012-1033: Medium severity ISC BIND vulnerability
Published Feb 8, 2012
·Updated
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Affected Software
72 affected components
ISC BIND=9.0
ISC BIND=9.0.1
ISC BIND=9.1
ISC BIND=9.1.1
ISC BIND=9.1.2
ISC BIND=9.1.3
ISC BIND=9.2
ISC BIND=9.2.0
ISC BIND=9.2.1
ISC BIND=9.2.2
ISC BIND=9.2.2-p3
ISC BIND=9.2.3
ISC BIND=9.2.4
ISC BIND=9.2.5
ISC BIND=9.2.6
ISC BIND=9.2.7
ISC BIND=9.3
ISC BIND=9.3.0
ISC BIND=9.3.1
ISC BIND=9.3.2
ISC BIND=9.3.3
ISC BIND=9.4
ISC BIND=9.4.0
ISC BIND=9.4.0-rc1
ISC BIND=9.4.1
ISC BIND=9.4.2
ISC BIND=9.4.3
ISC BIND=9.4.3-rc1
ISC BIND=9.5
ISC BIND=9.5.0
ISC BIND=9.5.0-rc1
ISC BIND=9.5.1
ISC BIND=9.5.1-rc1
ISC BIND=9.5.1-rc2
ISC BIND=9.6.0
ISC BIND=9.6.0-p1
ISC BIND=9.6.0-rc1
ISC BIND=9.6.0-rc2
ISC BIND=9.7.0
ISC BIND=9.7.0-b1
ISC BIND=9.7.0-p1
ISC BIND=9.7.0-p2
ISC BIND=9.7.0-rc1
ISC BIND=9.7.0-rc2
ISC BIND=9.7.1
ISC BIND=9.7.1-p1
ISC BIND=9.7.1-p2
ISC BIND=9.7.1-rc1
ISC BIND=9.7.2
ISC BIND=9.7.2-p1
ISC BIND=9.7.2-p2
ISC BIND=9.7.2-p3
ISC BIND=9.7.2-rc1
ISC BIND=9.7.3
ISC BIND=9.7.3-b1
ISC BIND=9.7.3-p1
ISC BIND=9.7.3-rc1
ISC BIND=9.7.4
ISC BIND=9.7.4-b1
ISC BIND=9.8.0
ISC BIND=9.8.0-a1
ISC BIND=9.8.0-b1
ISC BIND=9.8.0-p1
ISC BIND=9.8.0-p2
ISC BIND=9.8.0-p4
ISC BIND=9.8.0-rc1
ISC BIND=9.8.1
ISC BIND=9.8.1-b1
ISC BIND=9.8.1-b2
ISC BIND=9.8.1-b3
ISC BIND=9.8.1-p1
ISC BIND=9.8.1-rc1
Event History
Feb 8, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1033?
CVE-2012-1033 is considered a medium severity vulnerability.
2
What are the affected versions for CVE-2012-1033?
CVE-2012-1033 affects ISC BIND versions from 9.0 to 9.8.1-P1.
3
How do I fix CVE-2012-1033?
To fix CVE-2012-1033, upgrade ISC BIND to a version later than 9.8.1-P1.
4
What does CVE-2012-1033 exploit?
CVE-2012-1033 exploits the resolver in ISC BIND by overwriting cached server names and TTL values.
5
Can CVE-2012-1033 lead to a ghost domain attack?
Yes, CVE-2012-1033 allows attackers to cause revoked domain names to remain resolvable, leading to ghost domain attacks.