Is CVE-1999-0532 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0532 being exploited in the wild.

How severe is CVE-1999-0532?

Informational severity, with a CVSS score of 0, published 1 July 1997.

Is there a fix for CVE-1999-0532?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0532 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-1999-0532?

Check whether you run Generic DNS Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0532: Generic DNS Server Information Disclosure via AXFR Zone Transfer

CVE-1999-0532 · Severity: info · CVSS 0 · Published 1997-07-01

A misconfiguration in certain DNS servers allows unauthorized users to request a full copy of a domain's records, known as a zone transfer. This allows an outsider to map out a company's internal network structure, including the names and addresses of private servers and devices. While this does not directly crash systems, it provides attackers with a roadmap for more targeted and damaging cyberattacks.

Technologies: Generic DNS Server. Vendors: Generic.

Quick answers

Is CVE-1999-0532 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0532 being exploited in the wild.
How severe is CVE-1999-0532?: Informational severity, with a CVSS score of 0, published 1 July 1997.
Which products and versions are affected?: Generic DNS Server.
Is there a fix for CVE-1999-0532?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0532 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-1999-0532?: Check whether you run Generic DNS Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability arises from a DNS server being configured to respond to Asynchronous Transfer Full Range (AXFR) requests from any source rather than restricting them to authorized secondary servers. A remote, unauthenticated attacker can initiate a zone transfer to obtain a complete list of resource records for a DNS zone. This information disclosure reveals subdomains, IP addresses, and internal network topology, which facilitates reconnaissance for subsequent attacks. The issue is a configuration weakness (CWE-16) rather than a software bug. Mitigation involves configuring the DNS daemon (e.g., BIND) to restrict AXFR responses to specific, trusted IP addresses.

Affected products

Generic DNS Server

Timeline

1997-07-01: disclosed: Initial NVD publication date
2015-04-13: advisory: CISA (US-CERT) issued an alert regarding ongoing exploitation and scanning for this misconfiguration.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.