PT-2008-1004 · Powerdns · Powerdns Authoritative Server

Brian J. Dowling · Publicado 2008-08-07 · Atualizado 2024-06-15 · CVE-2008-3337

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerDNS Authoritative Server (affected versions not specified)

Description The issue exists due to the PowerDNS Authoritative Server's handling of malformed queries, allowing remote attackers to exploit this and potentially poison the DNS cache of other products running on different servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-00394

CVE-2008-3337

DSA-1628-1

OPENSUSE-SU-2024:11156-1

Produtos afetados

Powerdns Authoritative Server

Referências · 40

• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3337 · Nota
• https://suse.com/security/cve/CVE-2006-2069 · Nota
• https://suse.com/security/cve/CVE-2019-10203 · Nota
• https://suse.com/security/cve/CVE-2020-17482 · Nota
• https://suse.com/security/cve/CVE-2018-1046 · Nota
• https://suse.com/security/cve/CVE-2021-36754 · Nota
• http://doc.powerdns.com/changelog.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44253 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3337 · Aviso do Fabricante
• http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html · Correção
• https://suse.com/security/cve/CVE-2018-14626 · Nota
• http://vupen.com/english/advisories/2008/2320 · Nota
• https://suse.com/security/cve/CVE-2016-7072 · Nota