FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

powerdns-recursor -- DNS cache poisoning

Affected packages
powerdns-recursor < 3.1.5

Details

VuXML ID b21790a5-02fb-11dd-bd06-0017319806e7
Discovery 2008-03-31
Entry 2008-04-05

If the system random number generator can be predicted by its past output, then an attacker may spoof Recursor to accept mallicious data. This leads to DNS cache poisoning and client redirection.

References

URL http://doc.powerdns.com/security-policy.html