#VU111727 Input validation error in PowerDNS Recursor - CVE-2009-4010
Vulnerability identifier: #VU111727
Vulnerability risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID:
CWE-ID:
CWE-20
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
PowerDNS Recursor
Server applications /
DNS servers
Vendor: PowerDNS.COM B.V.
Description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.
Mitigation
Install update from vendor's website.
Vulnerable software versions
PowerDNS Recursor: 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.1.7.1
External links
https://doc.powerdns.com/powerdns-advisory-2010-02.html
https://secunia.com/advisories/38004
https://secunia.com/advisories/38068
https://securitytracker.com/id?1023404
https://www.securityfocus.com/archive/1/508743/100/0/threaded
https://www.securityfocus.com/bid/37653
https://www.vupen.com/english/advisories/2010/0054
https://bugzilla.redhat.com/show_bug.cgi?id=552285
https://exchange.xforce.ibmcloud.com/vulnerabilities/55439
https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html
https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
