Vulnerability in PowerDNS Recursor Server Name Caching

CVE-2012-1193

Summary

The PowerDNS Recursor 3.3 features a flaw in its resolver logic that enables remote attackers to exploit the caching mechanism. During the processing of responses to A record queries, the resolver incorrectly overwrites cached server names and time-to-live (TTL) values associated with NS records. This vulnerability poses a risk by allowing the continuance of resolvability for revoked domain names, which can lead to unauthorized access or misdirection, exemplified by a method commonly referred to as a 'ghost domain names' attack.

References