critical9.8
CVE-2014-7210
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user.
Impact
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Pdns | before 3.3.1-1 |
| Debian | Debian Linux | Version 7.0 |