CVE-2006-4251

EPSS 8.4%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 8.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

14 Nov 2006Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://doc.powerdns.com/powerdns-advisory-2006-01.html http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html http://secunia.com/advisories/22824 http://secunia.com/advisories/22903 http://secunia.com/advisories/22976 https://exchange.xforce.ibmcloud.com/vulnerabilities/30270 http://www.debian.org/security/2006/dsa-1211 http://www.securityfocus.com/bid/21037 http://www.vupen.com/english/advisories/2006/4484