CVE-2006-4252

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.

Affected Products (12)

powerdns · recursorvulnerable

References (14)

http://doc.powerdns.com/powerdns-advisory-2006-02.html

PatchVendor Advisory

http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html

http://secunia.com/advisories/22824

PatchVendor Advisory

http://secunia.com/advisories/22976

http://www.securityfocus.com/bid/21037

Patch

http://www.vupen.com/english/advisories/2006/4484

https://exchange.xforce.ibmcloud.com/vulnerabilities/30257

http://doc.powerdns.com/powerdns-advisory-2006-02.html

PatchVendor Advisory

http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html

http://secunia.com/advisories/22824

PatchVendor Advisory

http://secunia.com/advisories/22976

http://www.securityfocus.com/bid/21037

Patch

http://www.vupen.com/english/advisories/2006/4484

https://exchange.xforce.ibmcloud.com/vulnerabilities/30257