CVE Catalog
CVE-1999-0184
MediumExploitation Probability (EPSS)
High risk1.91%
77th percentile - higher than 77% of all known CVEs
Summary
CVE-1999-0184 affects the bind DNS server, which, when compiled with the -DALLOW_UPDATES option, allows dynamic updates. This creates a potential for malicious modification of DNS records.
Risk Assessment
Organizations may be vulnerable to attacks that allow manipulation of DNS records, potentially leading to traffic redirection or data theft.
Recommendation
It is recommended not to compile bind with the -DALLOW_UPDATES option or to implement appropriate security measures to restrict access to updates.
Original NVD description (English source)
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.