CVE-2005-2301: Medium severity PowerDNS DNSDist vulnerability
Published Jul 19, 2005
·Updated
PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack.
Affected Software
17 affected components
PowerDNS DNSDist=2.9.6
PowerDNS DNSDist=2.9.12
PowerDNS DNSDist=2.9.7
PowerDNS DNSDist=2.9.1
PowerDNS DNSDist=2.9.17
PowerDNS DNSDist=2.9.10
PowerDNS DNSDist=2.9.2
PowerDNS DNSDist=2.9.8
PowerDNS DNSDist=2.9.0
PowerDNS DNSDist=2.9.11
PowerDNS DNSDist=2.9.16
PowerDNS DNSDist=2.9.13
PowerDNS DNSDist=2.9.5
PowerDNS DNSDist=2.9.4
PowerDNS DNSDist=2.9.3a
PowerDNS DNSDist=2.9.14
PowerDNS DNSDist=2.9.15
Event History
Jul 19, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2301?
CVE-2005-2301 has been categorized as a vulnerability that may lead to denial of service and LDAP injection, indicating a significant risk.
2
How do I fix CVE-2005-2301?
To fix CVE-2005-2301, update PowerDNS to version 2.9.18 or later.
3
Which versions of PowerDNS are affected by CVE-2005-2301?
CVE-2005-2301 affects PowerDNS versions from 2.9.0 to 2.9.17.
4
Can CVE-2005-2301 allow attackers to execute code?
CVE-2005-2301 does not allow for arbitrary code execution but may facilitate denial of service and LDAP injection attacks.
5
What type of attack does CVE-2005-2301 permit?
CVE-2005-2301 permits remote attackers to conduct LDAP injection attacks and potentially cause denial of service.