CVE-2012-1570

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

• http://osvdb.org/80192Broken Link
• http://secunia.com/advisories/48492Third Party Advisory
• http://www.maradns.org/changelog.htmlRelease Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/03/20/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/20/10Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1026821Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=804770Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74119Third Party Advisory, VDB Entry
• http://osvdb.org/80192Broken Link
• http://secunia.com/advisories/48492Third Party Advisory
• http://www.maradns.org/changelog.htmlRelease Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/03/20/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/03/20/10Mailing List, Third Party Advisory
• http://www.securitytracker.com/id?1026821Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=804770Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74119Third Party Advisory, VDB Entry

Published

Mar 28, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1564Cross-site scripting (XSS) vulnerability in administration/c…
• CVE-2012-1565Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4…
• CVE-2012-1566LinuxMint as of 2012-03-19 has temporary file creation vulne…7.5
• CVE-2012-1567LinuxMint as of 2012-03-19 has temporary file creation vulne…7.5
• CVE-2012-1568The ExecShield feature in a certain Red Hat patch for the Li…
• CVE-2012-1569The asn1_get_length_der function in decoding.c in GNU Libtas…
• CVE-2012-1571file before 5.11 and libmagic allow remote attackers to caus…6.5
• CVE-2012-1572OpenStack Keystone: extremely long passwords can crash Keyst…7.5
• CVE-2012-1573gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.…
• CVE-2012-1574The Kerberos/MapReduce security functionality in Apache Hado…
• CVE-2012-1575Multiple cross-site scripting (XSS) vulnerabilities in Cumin…
• CVE-2012-1576The myuser_delete function in libathemecore/account.c in Ath…