CVE-1999-0024 describes a DNS cache poisoning vulnerability within older BIND implementations where predictable query IDs allow attackers to spoof DNS responses, affecting legacy products from vendors like ISC, Sun, and IBM. This Medium severity issue (CVSS 5.0) is exploitable via a network vector with low complexity and no authentication, potentially resulting in a partial loss of data integrity. Intelligence indicates no current active exploitation or available proof-of-concept code in major repositories, and the vulnerability remains inactive on the CISA Known Exploited Vulnerabilities list.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.9.5CPE matchmatch criteria | cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:* | ||
8.1CPE matchmatch criteria | cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:* | ||
2.1CPE matchmatch criteria | cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:* | ||
4.1CPE matchmatch criteria | cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.