CVE-2000-0887: Medium severity ISC BIND vulnerability
Published Dec 19, 2000
·Updated
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Affected Software
1 affected component
ISC BIND=8.2.2-p5
Remediation
Patch Available
Event History
Dec 19, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0887?
CVE-2000-0887 has a high severity due to its potential to cause a denial of service.
2
How do I fix CVE-2000-0887?
To fix CVE-2000-0887, upgrade BIND to a version later than 8.2.2-P6 where the vulnerability is patched.
3
What software versions are affected by CVE-2000-0887?
CVE-2000-0887 affects BIND versions 8.2 to 8.2.2-P6 inclusive.
4
What type of attack does CVE-2000-0887 involve?
CVE-2000-0887 involves remote attackers exploiting a compressed zone transfer request to cause a denial of service.
5
Can CVE-2000-0887 be exploited remotely?
Yes, CVE-2000-0887 can be exploited remotely without authentication.