Is CVE-1999-0533 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0533 being exploited in the wild.

How severe is CVE-1999-0533?

High severity, with a CVSS score of 7.5, published 1 July 1997.

Is there a fix for CVE-1999-0533?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0533 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-1999-0533?

Check whether you run Generic DNS Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0533: Generic DNS server information disclosure via inverse queries

CVE-1999-0533 · Severity: high · CVSS 7.5 · Published 1997-07-01

A configuration issue in certain Domain Name System (DNS) servers allows them to process inverse queries, which are requests to find a domain name based on an IP address. This capability can be abused by attackers to map out internal network structures or gather sensitive information about organizational assets. Such reconnaissance often serves as a precursor to more targeted attacks against company infrastructure.

Technologies: Generic DNS Server. Vendors: Generic.

Quick answers

Is CVE-1999-0533 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0533 being exploited in the wild.
How severe is CVE-1999-0533?: High severity, with a CVSS score of 7.5, published 1 July 1997.
Which products and versions are affected?: Generic DNS Server.
Is there a fix for CVE-1999-0533?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0533 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-1999-0533?: Check whether you run Generic DNS Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability involves a DNS server that has inverse query (IQUERY) support enabled. Inverse queries allow a requester to provide a resource record and ask for the associated domain name, a feature that was deprecated due to its inefficiency and security implications. An unauthenticated remote attacker can use this feature to perform network mapping and reconnaissance. By querying the DNS server in this manner, an attacker can potentially discover hostnames and internal IP address schemes. Most modern DNS implementations have disabled or removed support for IQUERY to mitigate this risk.

Affected products

Generic DNS Server

Timeline

1997-07-01: disclosed: NVD Published Date

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0533

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.