diff options
| author | trhodes <trhodes@FreeBSD.org> | 2005-07-21 08:43:12 +0000 |
|---|---|---|
| committer | trhodes <trhodes@FreeBSD.org> | 2005-07-21 08:43:12 +0000 |
| commit | ff45f1744ec9da1d4d4c6898131a56e01abe94fa (patch) | |
| tree | f7ce1679b2356a6ff2ac37e65e2d2fb9fcbbadd7 | |
| parent | 2bfd9cb4f0ba3817370b414c3db98e0b35f29cf5 (diff) | |
| download | FreeBSD-ports-ff45f1744ec9da1d4d4c6898131a56e01abe94fa.zip FreeBSD-ports-ff45f1744ec9da1d4d4c6898131a56e01abe94fa.tar.gz | |
Document an issue with the LDAP backend provided by PowerDNS.
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d76724f..c2bc584 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,36 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="43a7b0a7-f9bc-11d9-b473-00061bc2ad93"> + <topic>PowerDNS -- LDAP backend fails to escape all queries</topic> + <affects> + <package> + <name>powerdns</name> + <range><lt>2.9.18</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The LDAP backend in PowerDNS has issues with escaping + queries which could cause connection errors. This would + make it possible for a malicious user to temporarily blank + domains.</p> + <blockquote cite="http://doc.powerdns.com/security-policy.html"> + <p>This is known to affect all releases prior to 2.9.18.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CAN-2005-2302</cvename> + <url>http://doc.powerdns.com/security-policy.html</url> + <url>http://marc.theaimsgroup.com/?l=bugtraq&m=112155941310297&w=2</url> + </references> + <dates> + <discovery>2005-07-16</discovery> + <entry>2005-07-21</entry> + </dates> + </vuln> + <vuln vid="3497d7be-2fef-45f4-8162-9063751b573a"> <topic>fetchmail -- remote root/code injection from malicious POP3 server</topic> <affects> |
