Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Server 2008 安全漏洞
Vulnerability Description
Microsoft Windows Server 2008是美国微软(Microsoft)公司的一套服务器操作系统。 Microsoft Windows Server 2008 R2之前版本中的DNS Server服务中的resolver中存在漏洞,该漏洞源于在处理查询记录的响应过程中重写NS记录中的缓存服务器名称和TTL值。远程攻击者可利用该漏洞借助"ghost domain names"攻击触发已撤销域名的持续可解性。
CVSS Information
N/A
Vulnerability Type
N/A