Vulnerability in Microsoft Windows Server 2008
CVE-2012-1194
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
EPSS: 0.106 (95.3th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_server_2008
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)