« Volver al listado

CVE-2005-2302

Estado: ModificadaBaja (2.1)—

PowerDNS anterior a la 2.9.18, cuando permite recursión en un rango restringido de direcciones IP, no maneja adecuadamente peticiones de clientes a los que se les deniega la recursión. Esto podría causar un "bank out" de respuestas a aquellos clientes que sí les es permitido usar recursión.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Powerdns — Powerdns

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2302",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-07-19T04:00:00.000",
  "references": [
    {
      "url": "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1014504",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112155941310297&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1014504",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_19_sr.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a \"blank out\" of answers to those clients that are allowed to use recursion."
    },
    {
      "lang": "es",
      "value": "PowerDNS anterior a la 2.9.18, cuando permite recursión en un rango restringido de direcciones IP, no maneja adecuadamente peticiones de clientes a los que se les deniega la recursión. Esto podría causar un \"bank out\" de respuestas a aquellos clientes que sí les es permitido usar recursión."
    }
  ],
  "lastModified": "2026-06-16T22:14:38.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C1E89A2-4993-4208-B67F-52B08A6F1BDF"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B340CA64-2358-46E6-8F65-725B6ACE77D3"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ADBB8B1-C732-49BA-9270-F5551A9E2D0D"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80C62126-2E61-4532-BFA2-D66FCCC8C9E2"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4472A3D7-8E17-4D80-AA2D-724C74EEF9E7"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07CDE603-2A52-4C6F-B6A3-563D516BB4C4"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC3E5668-9B66-4C80-8C38-6FF01C342182"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB793844-A30A-4F97-954B-690083E77430"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B636157B-E627-4EF1-B6C2-640648C001D2"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34EEA40F-CD68-4AE9-A305-402BFBEEA23B"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40FFBCCC-3595-4148-A3CD-28FD390FB786"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B7722F1-D913-42A0-93EA-48140F47F221"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16E26E04-71AA-4A00-B0EE-9A04A63ADBBE"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A413F4D-123A-4AA6-A097-9900F9B39817"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F03070D-C76A-4A31-AA0C-E32442EBE83B"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2BE9083-C8DA-4CCB-AAA0-8E31A1C566D1"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11FC77A2-E464-4832-ADCD-68D66E7CB29E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}