Test ID:	1.3.6.1.4.1.25623.1.0.112378
Category:	General
Title:	PowerDNS Recursor < 3.5 Ghost Domain Names Attack
Summary:	The resolver in PowerDNS Recursor (aka pdns_recursor); 3.3 overwrites cached server names and TTL values in NS records during the processing of; a response to an A record query, which allows remote attackers to trigger continued resolvability; of revoked domain names via a "ghost domain names" attack.
Description:	Summary: The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Affected Software/OS: PowerDNS Recursor before version 3.5. Solution: Update PowerDNS Recursor to version 3.5 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1193 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102729.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104173.html https://www.isc.org/files/imce/ghostdomain_camera.pdf
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.