PT-2016-7979 · Debian · Debian+1
CVE-2014-7210
·
Publicado
2025-06-26
·
Atualizado
2025-06-27
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
pdns versions prior to 3.3.1-1
Description:
The issue arises from the pdns package in Debian, where the MySQL user is created with excessive privileges. Specifically, the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. This issue does not affect other backends.
Recommendations:
For versions prior to 3.3.1-1, update to version 3.3.1-1 or later to resolve the issue. As a temporary workaround, consider restricting the database permissions for the pdns user to minimize the risk of exploitation.
Correção
LPE
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Pdns