CVE-2013-6230

CVE-2013-6230 describes a vulnerability in the Winsock WSAIoctl API within Microsoft Windows Server 2008, specifically impacting ISC BIND versions 9.6-ESV, 9.8, and 9.9. The flaw arises from improper handling of the SIO_GET_INTERFACE_LIST command when processing a 255.255.255.255 netmask, which is misinterpreted as 0.0.0.0. This misinterpretation allows remote attackers to bypass intended IP address restrictions. With a CVSS score of 6.8, this vulnerability is rated as medium severity, indicating a network-based attack with medium complexity that could lead to partial confidentiality, integrity, and availability impacts. The EPSS and FAUCET scores suggest a relatively low likelihood of exploitation in the wild. Currently, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion and media coverage, suggesting a low profile and limited attention from threat actors.