| Vulnerability Name: | CVE-2008-3337 (CCN-44253) | ||||||||||||||||||||||||||||
| Assigned: | 2008-08-06 | ||||||||||||||||||||||||||||
| Published: | 2008-08-06 | ||||||||||||||||||||||||||||
| Updated: | 2017-08-08 | ||||||||||||||||||||||||||||
| Summary: | PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217. | ||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P) 4.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-20 | ||||||||||||||||||||||||||||
| Vulnerability Consequences: | Other | ||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2008-3337 Source: CONFIRM Type: UNKNOWN http://doc.powerdns.com/changelog.html Source: CCN Type: PowerDNS Security Advisory 2008-02 By not responding to certain queries, domains become easier to spoof Source: CONFIRM Type: UNKNOWN http://doc.powerdns.com/powerdns-advisory-2008-02.html Source: SUSE Type: UNKNOWN SUSE-SR:2008:017 Source: MLIST Type: Patch [pdns-users] 20080806 Security update: PowerDNS Authoritative Server 2.9.21.1 released Source: SECUNIA Type: UNKNOWN 31401 Source: CCN Type: SA31407 PowerDNS Malformed Queries Handling Weakness Source: SECUNIA Type: Vendor Advisory 31407 Source: SECUNIA Type: UNKNOWN 31448 Source: SECUNIA Type: UNKNOWN 31687 Source: SECUNIA Type: UNKNOWN 33264 Source: GENTOO Type: UNKNOWN GLSA-200812-19 Source: DEBIAN Type: DSA-1628 pdns -- DNS response spoofing Source: CCN Type: GLSA-200812-19 PowerDNS: Multiple vulnerabilities Source: CCN Type: PowerDNS Web site PowerDNS - A Modern, Advanced and High Performance Nameserver Source: BID Type: UNKNOWN 30587 Source: CCN Type: BID-30587 PowerDNS Malformed Query Handling Weakness Source: VUPEN Type: UNKNOWN ADV-2008-2320 Source: XF Type: UNKNOWN powerdns-query-weak-security(44253) Source: XF Type: UNKNOWN powerdns-query-weak-security(44253) Source: DEBIAN Type: UNKNOWN DSA-1628 Source: FEDORA Type: UNKNOWN FEDORA-2008-7048 Source: FEDORA Type: UNKNOWN FEDORA-2008-7083 Source: SUSE Type: SUSE-SA:2008:041 openwsman Source: SUSE Type: SUSE-SR:2008:017 SUSE Security Summary Report | ||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||