CVE-2006-4251

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.

• http://doc.powerdns.com/powerdns-advisory-2006-01.htmlPatch, Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html
• http://secunia.com/advisories/22824Patch, Vendor Advisory
• http://secunia.com/advisories/22903
• http://secunia.com/advisories/22976
• http://www.debian.org/security/2006/dsa-1211
• http://www.securityfocus.com/bid/21037Patch
• http://www.vupen.com/english/advisories/2006/4484
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30270
• http://doc.powerdns.com/powerdns-advisory-2006-01.htmlPatch, Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html
• http://secunia.com/advisories/22824Patch, Vendor Advisory
• http://secunia.com/advisories/22903
• http://secunia.com/advisories/22976
• http://www.debian.org/security/2006/dsa-1211
• http://www.securityfocus.com/bid/21037Patch
• http://www.vupen.com/english/advisories/2006/4484
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30270

Published

Nov 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4245archivemail 0.6.2 uses temporary files insecurely leading to…8.1
• CVE-2006-4246Usermin before 1.220 (20060629) allows remote attackers to r…
• CVE-2006-4247Unspecified vulnerability in the Password Reset Tool before …
• CVE-2006-4248thttpd on Debian GNU/Linux, and possibly other distributions…
• CVE-2006-4249Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1…
• CVE-2006-4250Buffer overflow in man and mandb (man-db) 2.4.3 and earlier …
• CVE-2006-4252PowerDNS Recursor 3.1.3 and earlier allows remote attackers …
• CVE-2006-4253Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and ear…
• CVE-2006-4254Unspecified vulnerability in setlocale in IBM AIX 5.1.0 thro…
• CVE-2006-4255Cross-site scripting (XSS) vulnerability in horde/imp/search…
• CVE-2006-4256index.php in Horde Application Framework before 3.1.2 allows…
• CVE-2006-4257IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows…