PowerDNS Malformed Query Handling Weakness

PowerDNS is prone to a weakness caused by dropping malformed DNS queries.

An attacker may leverage this issue to carry out spoofing attacks to manipulate third-party DNS cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks.

Versions prior to PowerDNS 2.9.21.1 are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus