Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs) into the cache and conduct a DNS cache poisoning attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Technitium DNS Server 安全漏洞
Vulnerability Description
Technitium DNS Server是Technitium团队的一个开源的权威和递归 DNS 服务器。可用于自托管 DNS 服务器以保护隐私和安全。 Technitium DNS Server 7.0版本及之前版本存在安全漏洞,该漏洞源于bailiwick检查功能存在漏洞。攻击者利用该漏洞将任何域(甚至 TLDs)的“NS”记录注入缓存,并进行DNS缓存中毒攻击。
CVSS Information
N/A
Vulnerability Type
N/A