# CVE-1999-0532: Generic DNS Server Information Disclosure via AXFR Zone Transfer

Source: https://junglewise.ai/threats/cve-1999-0532-generic-dns-server-information-disclosure-via-axfr-zone-transfer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1997-07-01. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-0532 · Severity: info · CVSS 0 · Published 1997-07-01

A misconfiguration in certain DNS servers allows unauthorized users to request a full copy of a domain's records, known as a zone transfer. This allows an outsider to map out a company's internal network structure, including the names and addresses of private servers and devices. While this does not directly crash systems, it provides attackers with a roadmap for more targeted and damaging cyberattacks.

Technologies: [Generic DNS Server](https://junglewise.ai/threats/technologies/dns-server). Vendors: [Generic](https://junglewise.ai/threats/vendors/generic).

## Quick answers

**Is CVE-1999-0532 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-0532 being exploited in the wild.

**How severe is CVE-1999-0532?** Informational severity, with a CVSS score of 0, published 1 July 1997.

**Which products and versions are affected?** Generic DNS Server.

**Is there a fix for CVE-1999-0532?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-0532 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-1999-0532?** Check whether you run Generic DNS Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability arises from a DNS server being configured to respond to Asynchronous Transfer Full Range (AXFR) requests from any source rather than restricting them to authorized secondary servers. A remote, unauthenticated attacker can initiate a zone transfer to obtain a complete list of resource records for a DNS zone. This information disclosure reveals subdomains, IP addresses, and internal network topology, which facilitates reconnaissance for subsequent attacks. The issue is a configuration weakness (CWE-16) rather than a software bug. Mitigation involves configuring the DNS daemon (e.g., BIND) to restrict AXFR responses to specific, trusted IP addresses.

## Affected products

- Generic DNS Server

## Timeline

- 1997-07-01: disclosed: Initial NVD publication date
- 2015-04-13: advisory: CISA (US-CERT) issued an alert regarding ongoing exploitation and scanning for this misconfiguration.

## References

- [https://www.cve.org/CVERecord?id=CVE-1999-0532](https://www.cve.org/CVERecord?id=CVE-1999-0532)
- [http://www.us-cert.gov/ncas/alerts/TA15-103A](http://www.us-cert.gov/ncas/alerts/TA15-103A)

## Related threats

- [Generic DNS server information disclosure via inverse queries](https://junglewise.ai/threats/cve-1999-0533-generic-dns-server-information-disclosure-via-inverse-queries)