CVE-1999-0009

CVSS 2.0 Score 10 of 10 (high)

Details

Published Apr 8, 1998
Updated: Nov 20, 2024

Summary

CVE-1999-0009 is a buffer overflow vulnerability affecting BIND 4.9 and BIND 8 releases. Maliciously crafted inverse queries can cause the buffer to overflow, resulting in unintended memory manipulation. This issue can allow an attacker to execute arbitrary code and potentially take control of the affected DNS server. System administrators should apply the available patches as soon as possible to mitigate this risk. This vulnerability, identified as CVE-1999-0009, allows an attacker to exploit a buffer overflow in the inverse query handling of BIND 4.9 and BIND 8 DNS servers. By sending specially crafted queries, an attacker can manipulate the server's memory, potentially leading to privilege escalation and server takeover. It is crucial for system administrators to apply the available patches to prevent potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX
  • IBM AIX
  • NetBSD
  • Sun Solaris
  • Red Hat Enterprise Linux

Affected Vendors

  • IBM Corporation
  • Red Hat
  • Oracle Corp
  • Netbsd
  • Internet Storm Center