• info
• discussion
• exploit
• solution
• references

PowerDNS Remote Cache Poisoning Vulnerability

Solution:
The vendor has released an advisory along with PowerDNS 3.1.5 to address this issue. Please see the references for more information.


PowerDNS PowerDNS 3.1

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.0

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.0.1

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.1.1

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.1.2

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.1.3

• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2

PowerDNS PowerDNS 3.1.4

• Debian pdns-recursor_3.1.4-1+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4-1+etch1_alpha.deb


• Debian pdns-recursor_3.1.4-1+etch1_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4-1+etch1_amd64.deb


• Debian pdns-recursor_3.1.4-1+etch1_i386.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/p/pdns-recursor/http://se curity.debian.org/pool/updates/main/p/pdns-recursor/pdns-recursor_3.1. 4-1+etch1_i386.deb


• Debian pdns-recursor_3.1.4-1+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4-1+etch1_ia64.deb


• Debian pdns-recursor_3.1.4-1+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4-1+etch1_powerpc.deb


• Debian pdns-recursor_3.1.4-1+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns-recursor/http://se curity.debian.org/pool/updates/main/p/pdns-recursor/pdns-recursor_3.1. 4-1+etch1_s390.deb


• PowerDNS pdns-recursor-3.1.5.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.5.tar.bz2