PT-2010-1002 · Powerdns · Powerdns Recursor

Publicado 2010-01-08 · Atualizado 2018-10-10 · CVE-2009-4010

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions prior to 3.1.7.2

Description The issue allows remote attackers to spoof DNS data by using crafted zones. This can potentially lead to unauthorized changes in DNS records, affecting the integrity of DNS data.

Recommendations For versions prior to 3.1.7.2, update to version 3.1.7.2 or later to resolve the issue.

Correção

Identificadores relacionados

BDU:2015-00664

CVE-2009-4010

DSA-1968-1

DSA-1968-2

Produtos afetados

Powerdns Recursor

Referências · 17

• http://securityfocus.com/archive/1/508743/100/0/threaded · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=552285 · Nota
• https://osv.dev/vulnerability/CVE-2009-4010 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2009-4010 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-00664 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2010-January/msg00217.html · Aviso do Fabricante
• http://securityfocus.com/bid/37653 · Nota
• http://securitytracker.com/id?1023404 · Nota
• http://secunia.com/advisories/38004 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4010 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4010 · Aviso do Fabricante
• http://secunia.com/advisories/38068 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4010 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2010-January/msg00228.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/0054 · Aviso do Fabricante