Test ID:	1.3.6.1.4.1.25623.1.0.66734
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1968-1)
Summary:	The remote host is missing an update for the Debian 'pdns-recursor' package(s) announced via the DSA-1968-1 advisory.;; This VT has been deprecated and merged into the VT 'deb_1968.nasl' (OID: 1.3.6.1.4.1.25623.1.0.66734).
Description:	Summary: The remote host is missing an update for the Debian 'pdns-recursor' package(s) announced via the DSA-1968-1 advisory. This VT has been deprecated and merged into the VT 'deb_1968.nasl' (OID: 1.3.6.1.4.1.25623.1.0.66734). Vulnerability Insight: It was discovered that pdns-recursor, the PowerDNS recursive name server, contains several vulnerabilities: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server into serving incorrect DNS data. For the oldstable distribution (etch), fixed packages will be provided soon. For the stable distribution (lenny), these problems have been fixed in version 3.1.7-1+lenny1. For the unstable distribution (sid), these problems have been fixed in version 3.1.7.2-1. We recommend that you upgrade your pdns-recursor package. Affected Software/OS: 'pdns-recursor' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4009 BugTraq ID: 37650 http://www.securityfocus.com/bid/37650 Bugtraq: 20100106 Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2 (Google Search) http://www.securityfocus.com/archive/1/508743/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00228.html http://securitytracker.com/id?1023403 http://secunia.com/advisories/38004 http://secunia.com/advisories/38068 http://www.vupen.com/english/advisories/2010/0054 XForce ISS Database: powerdns-unspecified-bo(55438) https://exchange.xforce.ibmcloud.com/vulnerabilities/55438 Common Vulnerability Exposure (CVE) ID: CVE-2009-4010 BugTraq ID: 37653 http://www.securityfocus.com/bid/37653 http://securitytracker.com/id?1023404 XForce ISS Database: powerdns-zones-spoofing(55439) https://exchange.xforce.ibmcloud.com/vulnerabilities/55439
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.