580 matches found
UBUNTU-CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
CVE-2017-15091
The CVE-2017-15091 issue affects PowerDNS Authoritative Server (4.x up to 4.0.4 and 3.x up to 3.4.11). Although the API can be configured as read-only via api-readonly, a missing check permits operations that alter server state: flushing the cache, triggering a zone transfer, or sending NOTIFY wh...
CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
PowerDNS Authoritative < 4.0.5 Read Only Configuration Bypass (CVE-2017-15091)
According to its self-reported version number, the version of the PowerDNS Authoritative listening on the remote host is prior to 4.0.5. It is, therefore, affected by a vulnerability in the API where a remote authenticated attacker can perform operations that affect the server state even if the...
openSUSE Security Update : pdns (openSUSE-2017-1340)
This update for pdns fixes the following issues : Security issue fixed : - CVE-2017-15091: An issue has been found in the API component of PowerDNS Authoritative, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as...
[SECURITY] Fedora 26 Update: pdns-recursor-4.0.7-1.fc26
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
[SECURITY] Fedora 27 Update: pdns-recursor-4.0.7-1.fc27
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
PowerDNS Authoritative Server Module Authentication Bypass Vulnerability (CNVD-2017-38247)
PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in DNSSEC signature verification that could allow a man-in-the-middle attacker to forge signatures and bypass security restrictions...
PowerDNS Authoritative Server Module Authentication Bypass Vulnerability
PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in API operations that can be exploited by attackers to bypass security restrictions and perform unauthorized operations...
PowerDNS Authoritative Server <= 4.0.4 DoS Vulnerability (2017-04)
PowerDNS Authoritative Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] Fedora 27 Update: knot-2.6.1-1.fc27
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 26 Update: knot-2.6.1-1.fc26
Knot DNS is a high-performance authoritative DNS server implementation...
Akamai's DNS Contribution to Internet Resiliency
Background Akamai Technologies recently contributed its "Serve Stale" DNS algorithm to Version 9 of the Internet Systems Consortium's ISC Berkeley Internet Name Domain BIND open source Domain Name System DNS project. As the Internet's most widely used DNS implementation, BIND operates ubiquitousl...
[SECURITY] Fedora 25 Update: knot-2.4.5-1.fc25
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 24 Update: knot-2.4.5-1.fc24
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 26 Update: knot-2.4.5-1.fc26
Knot DNS is a high-performance authoritative DNS server implementation...
The .io Error – Taking Control of All .io Domains With a Targeted Registration
In a previous post we talked about taking over the .na , .co.ao , and .it.ao domain extensions with varying levels of DNS trickery. In that writeup we examined the threat model of compromising a top level domain TLD and what some avenues would look like for an attacker to accomplish this goal. On...
Recursive DNS - The Achilles Heel Of Advanced Threats
We all know what happens whenever anyone or anything tries to access a resource on the Internet. It all starts with a DNS request that translates a URL www.akamai.com into an IP address 104.97.77.24: Now if we dive a little deeper into the DNS request flow we can see the requester make a request ...
Authoritative Cloudflare DNS Server Detection
Binary data 9976.prm...
DNS Poisoning Attacks Made Easy: Judas DNS
DNS Poisoning Attacks Made Easy A DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation. Judas works by proxying all DNS queries to the legitimate nameservers for a domain. The magic comes with Judas’s rule configurations which allow you to...