9.8
Critical
CVE-2014-7210 pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user
Description
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pdns 3.3 | earliest → < 3.3.1-1 | 3.3.1-1 |