漏洞信息详情
PowerDNS Recursor远程缓存投毒漏洞
- CNNVD编号:CNNVD-201001-052
- 危害等级: 中危
- CVE编号: CVE-2009-4010
- 漏洞类型: 资料不足
- 发布时间: 2010-01-08
- 威胁类型: 远程
- 更新时间: 2010-01-11
- 厂 商: powerdns
- 漏洞来源: bert hubert bert.h...
漏洞简介
PowerDNS Recursor(又名pdns_recursor)是荷兰PowerDNS公司的一款域名解析服务器。
远程攻击者可以诱骗PowerDNS Recursor接受恶意的数据,服务器在解析递归客户端查询期间可能错误的向其缓存添加记录,这是一种缓存中毒的情况。
DNS缓存中毒指的是更改了DNS服务器的DNS缓存中某项,这样缓存中与主机名相关的IP地址就不再指向正确的位置。例如,如果www.example.com映射到IP地址192.168.0.1且DNS服务器的缓存中存在这个映射,则成功向这个服务器的DNS缓存投毒的攻击者就可以将www.example.com映射到10.0.0.1。在这种情况下,试图访问www.example.com的用户就可能与错误的Web服务器联络。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Debian Linux 5.0 ia-64
Debian pdns-recursor_3.1.7-1+lenny1_ia64.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_ia64.deb
Debian Linux 4.0 powerpc
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_powerpc.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_powerpc.deb
Debian Linux 5.0 alpha
Debian pdns-recursor_3.1.7-1+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_alpha.deb
PowerDNS PowerDNS 3.1
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
Debian Linux 5.0 ia-32
Debian pdns-recursor_3.1.7-1+lenny1_i386.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_i386.deb
Debian Linux 5.0 s/390
Debian pdns-recursor_3.1.7-1+lenny1_s390.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_s390.deb
Debian Linux 4.0 amd64
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_amd64.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_amd64.deb
Debian Linux 4.0 ia-32
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_i386.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_i386.deb
Debian Linux 4.0 s/390
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_s390.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_s390.deb
Debian Linux 4.0 alpha
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_alpha.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_alpha.deb
Debian Linux 5.0 amd64
Debian pdns-recursor_3.1.7-1+lenny1_amd64.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_amd64.deb
Debian Linux 5.0 powerpc
Debian pdns-recursor_3.1.7-1+lenny1_powerpc.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.7-1+lenny1_powerpc.deb
Debian Linux 4.0 ia-64
Debian pdns-recursor_3.1.4+v3.1.7-0+etch1_ia64.deb
http://security.debian.org/pool/updates/main/p/pdns-recursor/pdns-recu rsor_3.1.4+v3.1.7-0+etch1_ia64.deb
PowerDNS PowerDNS 3.0
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.0.1
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.1
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.2
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.3
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.4
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.5
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.6
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.7 .1
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
PowerDNS PowerDNS 3.1.7
PowerDNS pdns-recursor-3.1.7.2.tar.bz2
http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.2.tar.bz2
参考网址
来源: VUPEN
名称: ADV-2010-0054
链接:http://www.vupen.com/english/advisories/2010/0054
来源: FEDORA
名称: FEDORA-2010-0228
链接:https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.HTML
来源: FEDORA
名称: FEDORA-2010-0209
链接:https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.HTML
来源: bugzilla.redhat.com
链接:https://bugzilla.redhat.com/show_bug.cgi?id=552285
来源: XF
名称: powerdns-zones-spoofing(55439)
链接:http://xforce.iss.net/xforce/xfdb/55439
来源: BID
名称: 37653
链接:http://www.securityfocus.com/bid/37653
来源: BUGTRAQ
名称: 20100106 Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2
链接:http://www.securityfocus.com/archive/1/archive/1/508743/100/0/threaded
来源: SECTRACK
名称: 1023404
链接:http://securitytracker.com/id?1023404
来源: SECUNIA
名称: 38068
链接:http://secunia.com/advisories/38068
来源: SECUNIA
名称: 38004
链接:http://secunia.com/advisories/38004
来源: doc.powerdns.com
链接:http://doc.powerdns.com/powerdns-advisory-2010-02.HTML
来源:NSFOCUS 名称:14304 链接:http://www.nsfocus.net/vulndb/14304
受影响实体
- Powerdns Recursor:3.1.7.2
- Powerdns Recursor:3.1.7.1
- Powerdns Recursor:2.9.15
- Powerdns Recursor:2.8
- Powerdns Recursor:2.0_rc1
补丁
- pdns-recursor-3.2-1.i386.rpm
- pdns-recursor-3.2
- pdns-recursor_3.2-1_amd64
- pdns-recursor-3.1.7.2
- pdns-recursor_3.2-1_i386.deb
评论