CVE-1999-0009

CVE-1999-0009 is a critical buffer overflow vulnerability located in the inverse query handling mechanism of ISC BIND 4.9 and BIND 8 releases, affecting a wide range of legacy vendor implementations including Sun, IBM, and Red Hat. Assigned a maximum CVSS score of 10.0, this flaw allows unauthenticated remote attackers to execute arbitrary code with root privileges via low-complexity network vectors, resulting in complete system compromise. While historical proof-of-concept code is available on ExploitDB, there is no current evidence of active exploitation in the wild or recent community discussion regarding this inactive threat. However, an EPSS score of approximately 0.80 indicates a statistically high probability of exploitation if vulnerable legacy infrastructure remains accessible.