Lucene search

K
freebsdFreeBSD43A7B0A7-F9BC-11D9-B473-00061BC2AD93
HistoryJul 16, 2005 - 12:00 a.m.

PowerDNS -- LDAP backend fails to escape all queries

2005-07-1600:00:00
vuxml.freebsd.org
13

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.001

Percentile

21.0%

The LDAP backend in PowerDNS has issues with escaping
queries which could cause connection errors. This would
make it possible for a malicious user to temporarily blank
domains.

This is known to affect all releases prior to 2.9.18.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpowerdns< 2.9.18UNKNOWN

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.001

Percentile

21.0%

Related for 43A7B0A7-F9BC-11D9-B473-00061BC2AD93