CVE-2009-4010
high · 7.5Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.
7.5
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2010-01-08
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| powerdns | recursor | <= 3.1.7.2 |
| powerdns | recursor | 2.0_rc1 |
| powerdns | recursor | 2.8 |
| powerdns | recursor | 2.9.15 |
| powerdns | recursor | 2.9.16 |
| powerdns | recursor | 2.9.17 |
| powerdns | recursor | 2.9.18 |
| powerdns | recursor | 3.0 |
| powerdns | recursor | 3.0.1 |
| powerdns | recursor | 3.1 |
| powerdns | recursor | 3.1.1 |
| powerdns | recursor | 3.1.2 |
| powerdns | recursor | 3.1.3 |
| powerdns | recursor | 3.1.4 |
| powerdns | recursor | 3.1.5 |
| powerdns | recursor | 3.1.6 |
| powerdns | recursor | 3.1.7 |
| powerdns | recursor | 3.1.7.1 |
Check a specific version with /api/v1/cve/match.
References
- http://doc.powerdns.com/powerdns-advisory-2010-02.html
- http://secunia.com/advisories/38004
- http://secunia.com/advisories/38068
- http://securitytracker.com/id?1023404
- http://www.securityfocus.com/archive/1/508743/100/0/threaded
- http://www.securityfocus.com/bid/37653
- http://www.vupen.com/english/advisories/2010/0054
- https://bugzilla.redhat.com/show_bug.cgi?id=552285
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55439
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.html
- http://doc.powerdns.com/powerdns-advisory-2010-02.html
- http://secunia.com/advisories/38004
- http://secunia.com/advisories/38068
- http://securitytracker.com/id?1023404
- http://www.securityfocus.com/archive/1/508743/100/0/threaded
- http://www.securityfocus.com/bid/37653
- http://www.vupen.com/english/advisories/2010/0054
- https://bugzilla.redhat.com/show_bug.cgi?id=552285
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55439
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html
- https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2009-4010