CVE-1999-0184: Medium severity ISC BIND vulnerability
When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Rebuild/compile ISC BIND 9 without the -DALLOW_UPDATES option so the server does not allow dynamic updates that could permit malicious modification of DNS records.
ISC BIND 9 -DALLOW_UPDATES compile-time option = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0184?
CVE-1999-0184 is considered a high severity vulnerability due to the potential for malicious modification of DNS records.
How do I fix CVE-1999-0184?
To fix CVE-1999-0184, disable the -DALLOW_UPDATES option in the BIND configuration.
Which versions of BIND are affected by CVE-1999-0184?
CVE-1999-0184 specifically affects BIND version 9.4.0 when compiled with the -DALLOW_UPDATES option.
What are the implications of CVE-1999-0184?
The implications of CVE-1999-0184 include unauthorized access to modify DNS records, leading to potential redirection of users to malicious sites.
Is CVE-1999-0184 still relevant today?
While CVE-1999-0184 is an older vulnerability, it remains relevant for organizations using outdated versions of BIND with dynamic update features enabled.