The remote DNS drops malformed queries.  If it is not just a resolver and serves a domain name, this may help poisoning the cache of other DNS resolvers.  PoweDNS 2.9.21 and earlier are known to exhibit this behavior. 

Note that this does not mean that this server would be vulnerable to cache poisoning if it were a resolver.

リモートDNSが無効な形式のクエリをドロップします。これが単なるリゾルバーではなく、ドメイン名を提供する場合、これは他のDNSリゾルバーのキャッシュのポイズニングに役立つ可能性があります。PoweDNS 2.9.21以前は、この挙動を示すことが知られています。 

注意：これは、このサーバーがリゾルバーである場合、このサーバーがキャッシュポイズニングに脆弱であることを意味するものではありません。

远程 DNS 丢弃畸形查询。如果 DNS 不只是一个解析器，还提供域名，则可能有助于毒化其他 DNS 解析器的缓存。已知 PoweDNS 2.9.21 及更早版本表现出此行为。 

请注意，这并不意味着此服务器在是解析器的情况下容易遭受缓存中毒。

- Wed Aug 6 2008 Ruben Kerkhof <ruben at rubenkerkhof.com>     2.9.21.1-1

    - CVE-2008-3337

    - Sat Feb 9 2008 Ruben Kerkhof <ruben at       rubenkerkhof.com> 2.9.21-4

    - GCC 4.3 fixes

    - Wed Dec 5 2007 Ruben Kerkhof <ruben at       rubenkerkhof.com> 2.9.21-3

    - Rebuild to pick up new openldap

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Brian Dowling discovered that the PowerDNS authoritative name server does not respond to DNS queries which contain certain characters, increasing the risk of successful DNS spoofing (CVE-2008-3337 ). This update changes PowerDNS to respond with SERVFAIL responses instead.

遠端 DNS 會中斷格式錯誤的查詢。如果它不只是解析程式，還會提供網域名稱，這可能有助於毒害其他 DNS 解析程式的快取。已知 PoweDNS 2.9.21 和更舊版本中會出現此行為。 

請注意，這並不表示如果此伺服器是解析程式，它就容易受到快取毒害攻擊。

This update of pdns offers better spoofing resistance by not ignoring invalid queries. (CVE-2008-3337)

The remote host is affected by the vulnerability described in GLSA-200812-19 (PowerDNS: Multiple vulnerabilities)

    Daniel Drown reported an error when receiving a HINFO CH query     (CVE-2008-5277). Brian J. Dowling of Simplicity Communications     discovered a previously unknown security implication of the PowerDNS     behavior to not respond to certain queries it considers malformed     (CVE-2008-3337).
  Impact :

    A remote attacker could send specially crafted queries to cause a     Denial of Service. The second vulnerability in itself does not pose a     security risk to PowerDNS Nameserver. However, not answering a query     for an invalid DNS record within a valid domain allows for a larger     spoofing window on third-party nameservers for domains being hosted by     PowerDNS Nameserver itself.
  Workaround :

    There is no known workaround at this time.

- Wed Aug 6 2008 Ruben Kerkhof <ruben at rubenkerkhof.com>     2.9.21.1-1

    - CVE-2008-3337

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
33868	PowerDNS Authoritative Server Malformed Query Cache Poisoning Weakness	Nessus	DNS	2008/8/12	2018/7/25	high
33868	PowerDNS Authoritative Serverでの無効な形式のクエリキャッシュポイズニングの脆弱性	Nessus	DNS	2008/8/12	2018/7/25	high
33868	PowerDNS 授权服务器畸形查询缓存中毒漏洞	Nessus	DNS	2008/8/12	2018/7/25	high
33846	Fedora 8 : pdns-2.9.21.1-1.fc8 (2008-7083)	Nessus	Fedora Local Security Checks	2008/8/8	2021/1/11	medium
33933	Debian DSA-1628-1 : pdns - DNS response spoofing	Nessus	Debian Local Security Checks	2008/8/19	2021/1/4	medium
33868	PowerDNS 授權伺服器格式錯誤的查詢會觸發快取毒害弱點	Nessus	DNS	2008/8/12	2018/7/25	high
33887	openSUSE 10 Security Update : pdns (pdns-5510)	Nessus	SuSE Local Security Checks	2008/8/14	2021/1/14	medium
35244	GLSA-200812-19 : PowerDNS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/12/21	2021/1/6	medium
40102	openSUSE Security Update : pdns (pdns-146)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
33844	Fedora 9 : pdns-2.9.21.1-1.fc9 (2008-7048)	Nessus	Fedora Local Security Checks	2008/8/8	2021/1/11	medium

偵測

搜尋 Plugin

high

high

high

medium

medium

high

medium

medium

medium

medium