Vulnerabilities > CVE-2009-4010 - Remote Cache Poisoning vulnerability in PowerDNS Recursor
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.
Vulnerable Configurations
Nessus
NASL family DNS NASL id POWERDNS_RECURSOR_3_1_7_2.NASL description According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.1.7.2. It is, therefore, affected by multiple vulnerabilities : - A buffer overflow condition exists that allows a remote attacker, via crafted packets, to cause a daemon crash, resulting in a denial of service condition. (CVE-2009-4009) - An unspecified flaw exists that allows a remote attacker to spoof DNS data via crafted zones. (CVE-2009-4010) Note that Nessus has not attempted to exploit these issues but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 87950 published 2016-01-15 reporter This script is Copyright (C) 2016-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/87950 title PowerDNS Recursor 3.x < 3.1.7.2 Multiple Vulnerabilities NASL family SuSE Local Security Checks NASL id SUSE_11_0_PDNS-RECURSOR-100209.NASL description This update of pdns-rucursor improves the packet parsing code to fix a possible DNS spoofing vulnerability (CVE-2009-4010) and a remote buffer overflow that could give the ability to execute arbitrary code (CVE-2009-4009). last seen 2020-06-01 modified 2020-06-02 plugin id 44610 published 2010-02-15 reporter This script is Copyright (C) 2010-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/44610 title openSUSE Security Update : pdns-recursor (pdns-recursor-1945) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_DD8F2394FD0811DEB42500215C6A37BB.NASL description PowerDNS Security Advisory reports : PowerDNS Recursor up to and including 3.1.7.1 can be brought down and probably exploited. PowerDNS Recursor up to and including 3.1.7.1 can be spoofed into accepting bogus data last seen 2020-06-01 modified 2020-06-02 plugin id 43847 published 2010-01-11 reporter This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/43847 title FreeBSD : powerdns-recursor -- multiple vulnerabilities (dd8f2394-fd08-11de-b425-00215c6a37bb) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201412-33.NASL description The remote host is affected by the vulnerability described in GLSA-201412-33 (PowerDNS Recursor: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in PowerDNS Recursor. Please review the CVE identifiers and PowerDNS blog post referenced below for details. Impact : A remote attacker may be able to send specially crafted packets, possibly resulting in arbitrary code execution or a Denial of Service condition. Furthermore, a remote attacker may be able to spoof DNS data. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 80210 published 2014-12-23 reporter This script is Copyright (C) 2014-2017 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/80210 title GLSA-201412-33 : PowerDNS Recursor: Multiple vulnerabilities NASL family SuSE Local Security Checks NASL id SUSE_11_2_PDNS-RECURSOR-100209.NASL description This update of pdns-rucursor improves the packet parsing code to fix a possible DNS spoofing vulnerability (CVE-2009-4010) and a remote buffer overflow that could give the ability to execute arbitrary code (CVE-2009-4009). last seen 2020-06-01 modified 2020-06-02 plugin id 44619 published 2010-02-15 reporter This script is Copyright (C) 2010-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/44619 title openSUSE Security Update : pdns-recursor (pdns-recursor-1945) NASL family Fedora Local Security Checks NASL id FEDORA_2010-0228.NASL description Update to upstream version 3.1.7.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 44888 published 2010-02-25 reporter This script is Copyright (C) 2010-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/44888 title Fedora 12 : pdns-recursor-3.1.7.2-1.fc12 (2010-0228) NASL family Fedora Local Security Checks NASL id FEDORA_2010-0209.NASL description Update to upstream version 3.1.7.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 44885 published 2010-02-25 reporter This script is Copyright (C) 2010-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/44885 title Fedora 11 : pdns-recursor-3.1.7.2-1.fc11 (2010-0209) NASL family Debian Local Security Checks NASL id DEBIAN_DSA-1968.NASL description It was discovered that pdns-recursor, the PowerDNS recursive name server, contains several vulnerabilities : - CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. - CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server into serving incorrect DNS data. last seen 2020-06-01 modified 2020-06-02 plugin id 44833 published 2010-02-24 reporter This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/44833 title Debian DSA-1968-1 : pdns-recursor - several vulnerabilities NASL family SuSE Local Security Checks NASL id SUSE_11_1_PDNS-RECURSOR-100209.NASL description This update of pdns-rucursor improves the packet parsing code to fix a possible DNS spoofing vulnerability (CVE-2009-4010) and a remote buffer overflow that could give the ability to execute arbitrary code (CVE-2009-4009). last seen 2020-06-01 modified 2020-06-02 plugin id 44615 published 2010-02-15 reporter This script is Copyright (C) 2010-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/44615 title openSUSE Security Update : pdns-recursor (pdns-recursor-1945)
References
- http://doc.powerdns.com/powerdns-advisory-2010-02.html
- http://secunia.com/advisories/38004
- http://secunia.com/advisories/38068
- http://securitytracker.com/id?1023404
- http://www.securityfocus.com/archive/1/508743/100/0/threaded
- http://www.securityfocus.com/bid/37653
- http://www.vupen.com/english/advisories/2010/0054
- https://bugzilla.redhat.com/show_bug.cgi?id=552285
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55439
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.html