CVE-2014-7210 pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissio...
CriticalCVSS 9.8
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends
are not affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pdns(Debian:12) | < 3.3.1-1 | 3.3.1-1 |
| debian/pdns(Debian:13) | < 3.3.1-1 | 3.3.1-1 |
| debian/pdns(Debian:14) | < 3.3.1-1 | 3.3.1-1 |
| debian/pdns | < 3.3.1-1 | 3.3.1-1 |
| debian linux | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-7210 vendor-advisory
- lists.debian.org mailing-list vendor-advisory
- salsa.debian.org patch