CVE-1999-0009: Buffer Overflow

Published Apr 8, 1998

Updated

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Affected Software

76 affected components

ISC BIND=8.1

SGI IRIX=5.3

Data General Dg Ux=5.4_3.0

SGI IRIX=4.0.5_iop

Data General Dg Ux=5.4_3.1

SGI IRIX=4.0

SGI IRIX=3.3.2

SGI IRIX=4.0.5h

SGI IRIX=4.0.4

SGI IRIX=4.0.1

SGI IRIX=6.1

SGI IRIX=3.3.1

SGI IRIX=5.0.1

SGI IRIX=4.0.5e

SGI IRIX=4.0.3

SGI IRIX=5.1.1

SGI IRIX=4.0.5a

SGI IRIX=3.3.3

ISC BIND=4.9.6

SGI IRIX=4.0.5_ipr

SGI IRIX=5.0

Data General Dg Ux=5.4_4.11

SGI IRIX=4.0.1t

SGI IRIX=5.1

SGI IRIX=4.0.5f

SGI IRIX=4.0.5g

SGI IRIX=5.2

SGI IRIX=4.0.5d

SGI IRIX=6.0

SGI IRIX=6.3

SGI IRIX=4.0.5

SGI IRIX=3.3

SGI IRIX=4.0.4b

Data General Dg Ux=5.4_4.1

SGI IRIX=6.2

SGI IRIX=4.0.2

SGI IRIX=4.0.4t

ISC BIND=8.1.1

SGI IRIX=3.2

IBM AIX=4.3

SCO Open Desktop=3.0

Sun SunOS=5.3

IBM AIX=4.2.1

NetBSD NetBSD=1.3

Caldera OpenLinux=1.0

Sun Solaris=2.5.1

Sun Solaris=2.5

IBM AIX=4.1.4

IBM AIX=4.2

IBM AIX=4.1.5

NetBSD NetBSD=1.2.1

NetBSD NetBSD=1.3.1

BSDI Bsd Os=2.0

redhat Linux=5.0

NEC Asl Ux 4800=64

Sun SunOS=5.5

NetBSD NetBSD=1.0

SCO Open Desktop=5.0

SCO UnixWare=2.1

BSDI Bsd Os=2.1

redhat Linux=4.1

IBM AIX=4.1.1

NetBSD NetBSD=1.1

Sun SunOS=5.4

redhat Linux=4.0

SCO UnixWare=7.0

Sun SunOS=5.5.1

IBM AIX=4.1.2

redhat Linux=4.2

BSDI Bsd Os=2.0.1

IBM AIX=4.1

IBM AIX=4.1.3

NetBSD NetBSD=1.2

Sun Solaris=2.6

Sun SunOS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove BIND 4.9 from your environment.
Uninstall BIND 4.9 if present to mitigate the inverse query buffer overflow.
Remove
Remove BIND 8 from your environment.
Uninstall BIND 8 if present to mitigate the inverse query buffer overflow.

Event History

Apr 8, 1998

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Sep 29, 1999

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0009?

CVE-1999-0009 is classified as a high-severity vulnerability due to the potential for remote exploitation and denial of service.

How do I fix CVE-1999-0009?

To fix CVE-1999-0009, users should upgrade to a patched version of BIND that is no longer vulnerable.

Which versions are affected by CVE-1999-0009?

CVE-1999-0009 affects BIND versions 4.9 and 8.1, among others listed in the vulnerability details.

Can CVE-1999-0009 lead to system compromise?

Yes, CVE-1999-0009 can lead to system compromise through buffer overflow, allowing an attacker to execute arbitrary code.

Is there a workaround for CVE-1999-0009?

A potential workaround for CVE-1999-0009 is to restrict access to affected DNS services from untrusted networks.