Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-1499 — Bind vulnerability

4 documents4 sources

Severity

2.1LOWNVD

EPSS

0.5%

top 32.42%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

ISC Bind

Timeline

PublishedApr 10

Latest updateApr 30

Description

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDisc/bind4.9, 8.1+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

GHSA

GHSA-wg36-cvm4-gq96: named in ISC BIND 4↗2022-04-30

▶

CVEList

CVE-1999-1499: named in ISC BIND 4↗2001-09-12

▶

💥Exploits & PoCs

Exploit-DB

ISC BIND 4.9.7 -T1B - named SIGINT / SIGIOT Symlink↗1998-04-10

▶