First published: Tue Jul 01 1997(Updated: )
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ISC BIND 9 | =9.4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0184 is considered a high severity vulnerability due to the potential for malicious modification of DNS records.
To fix CVE-1999-0184, disable the -DALLOW_UPDATES option in the BIND configuration.
CVE-1999-0184 specifically affects BIND version 9.4.0 when compiled with the -DALLOW_UPDATES option.
The implications of CVE-1999-0184 include unauthorized access to modify DNS records, leading to potential redirection of users to malicious sites.
While CVE-1999-0184 is an older vulnerability, it remains relevant for organizations using outdated versions of BIND with dynamic update features enabled.