CVE Catalog
CVE-1999-0024
MediumExploitation Probability (EPSS)
Very high risk4.94%
91th percentile - higher than 91% of all known CVEs
Summary
CVE-1999-0024 vulnerability involves a malicious attack on DNS cache via BIND, exploiting predictable query IDs.
Risk Assessment
An attacker can take control of DNS responses, leading to redirection of network traffic to malicious servers, posing a serious security threat to the organization.
Recommendation
It is recommended to update BIND software to the latest version and implement additional security measures, such as random query IDs.
Original NVD description (English source)
DNS cache poisoning via BIND, by predictable query IDs.