PT-1997-1085 · Isc · Bind

Published 1997-07-01 · Updated 2022-08-17 · CVE-1999-0184

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions bind (affected versions not specified)

Description The issue allows malicious modification of DNS records due to the ability to perform dynamic updates to the DNS server when compiled with the -DALLOW UPDATES option.

Recommendations For versions compiled with the -DALLOW UPDATES option, consider disabling dynamic updates to prevent malicious modification of DNS records until a fix is available.

Fix

Related Identifiers

CVE-1999-0184

Affected Products

Bind

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0184 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0184 · Note