CVE-2000-0887

BIND 8.2-8.2.2-P6 - Denial of Service via Compressed Zone Transfer Request

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0887. PoCs published by Fabio Pietrosanti.

AI-analyzed exploit summary The provided text describes a Denial of Service (DoS) vulnerability in BIND due to improper handling of Compressed Zone Transfer (ZXFR) requests. The exploit involves sending a crafted ZXFR query to a vulnerable BIND server, causing it to crash if the zone is not cached.

Description

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."

Exploits (1)

exploitdb WRITEUP VERIFIED

by Fabio Pietrosanti · textdoslinux

https://www.exploit-db.com/exploits/20388

View Code ZIP pw:eip

The provided text describes a Denial of Service (DoS) vulnerability in BIND due to improper handling of Compressed Zone Transfer (ZXFR) requests. The exploit involves sending a crafted ZXFR query to a vulnerable BIND server, causing it to crash if the zone is not cached.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: BIND (versions supporting ZXFR, pre-2000)

No auth needed

Prerequisites: BIND server with zone transfers and recursive queries enabled

MITRE ATT&CK