CVE-2012-1194: Medium severity Microsoft Windows Server 2008 vulnerability
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1194?
CVE-2012-1194 is classified as a critical vulnerability due to the potential for remote exploitation.
How do I fix CVE-2012-1194?
To mitigate CVE-2012-1194, apply the latest security patches provided by Microsoft for Windows Server 2008.
What impact does CVE-2012-1194 have on my system?
CVE-2012-1194 can allow attackers to make revoked domain names resolvable, which compromises DNS integrity.
Which versions of Windows Server are affected by CVE-2012-1194?
CVE-2012-1194 affects Microsoft Windows Server 2008 before R2, including all service packs.
What should I do if I cannot immediately patch for CVE-2012-1194?
If immediate patching is not possible, consider implementing firewall rules to restrict access to the DNS server.